subdomain-takeovers.yml
ID: subdomain-takeovers.yml
Severity: “
Author: —
Tags:
Description
Section titled “Description”YAML Source
Section titled “YAML Source”# Nuclei Configuration Profile for Subdomain Takeover Detection## This configuration file is specifically tailored for detecting subdomain takeovers using Nuclei.## Purpose:# This profile is focused on identifying subdomain takeover vulnerabilities across different cloud service providers.# Subdomain takeovers can occur when a DNS entry points to a deprovisioned or unclaimed cloud resource, potentially# allowing an attacker to claim the resource and hijack the subdomain.## Running this profile# You can run this profile using the following command :# nuclei -profile subdomain-takeovers -u https://www.example.com
templates: - http/takeovers/ - dns/azure-takeover-detection.yaml - dns/elasticbeanstalk-takeover.yamlGuide to check the vulnerabilities
Section titled “Guide to check the vulnerabilities”This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.
$ nuclei -u "URL" -t "profiles/subdomain-takeovers.yml"