indianajson/can-i-take-over-dns resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1103 stars · 100 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A curated reference list of DNS providers and whether domains pointing to their nameservers are vulnerable to DNS (zone) takeover, with fingerprints and takeover instructions. Inspired by Can I Take Over XYZ?, it also includes guidance on writing bug bounty reports with valid proofs of concept.

Use cases

• identify dangling DNS records vulnerable to takeover
• check if a nameserver provider allows DNS hijacking
• find subdomain takeover bugs for bug bounty reports
• fingerprint DNS providers from nameserver hostnames
• learn how DNS takeovers work with real report examples

When to choose

• you are doing bug bounty or security research on domain/subdomain takeovers
• you need a quick reference of DNS provider fingerprints and vulnerability status
• you want a template for writing a DNS takeover bounty report

When to avoid

• you need an automated scanning tool rather than a manual reference list
• you need general subdomain takeover via CNAME/HTTP services (use can-i-take-over-xyz)
• you need guaranteed up-to-date vulnerability status - the list is updated infrequently

Facets

learning-resource · maturity active

security vulnerability-scanning documentation security networking penetration-testing osint cli dns-takeover subdomain-takeover bug-bounty dangling-dns infosec reference-list web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="indianajson/can-i-take-over-dns")