Ross ROSS = Recommend OSS · open-source software intelligence for agents

punk-security/dnsReaper

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team! observed · 2026-08-28

github.com/punk-security/dnsReaper · Python · AGPL-3.0 (copyleft) observed · 2026-08-28

Health v2 · maintenance only

58/100

  • Activity 45
  • Release rhythm 51
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: 17
  • age_days: 1506
  • days_rel: 331
  • days_push: 331
  • n_releases_24m: 4

Full methodology

Adoption not part of the score

2216 stars · 195 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

DNS Reaper is a Python CLI tool that scans DNS records for subdomain takeover vulnerabilities using over 50 signatures, at roughly 50 subdomains per second. It supports fetching records directly from providers like AWS Route53, Cloudflare, and Azure, and can run in CI pipelines to block takeovers before deployment.

Use cases

  • scan my domains for subdomain takeover vulnerabilities
  • find dangling cname records in my dns zone
  • check aws route53 records for takeover risk as a defender
  • run subdomain takeover checks in a ci pipeline
  • find exploitable subdomains for bug bounty
  • audit cloudflare and azure dns records for misconfigurations

When to choose

  • you need fast, accurate subdomain takeover detection with many signatures
  • you want to scan your DNS estate directly via provider credentials
  • you need non-zero exit codes for DevSecOps pipeline gating

When to avoid

  • you need general DNS enumeration or subdomain discovery rather than takeover detection
  • you need a GUI-only workflow (the web version is limited to ~100 subdomains)
  • your DNS provider is not supported and you cannot write a custom provider

Facets

cli-tool · maturity active

security vulnerability-scanning networking cli security penetration-testing networking developer-tools cli python cross-platform subdomain-takeover dns bug-bounty attack-surface devsecops docker

1 source

Member repositories

RepositoryRoleHealth v2
punk-security/dnsReapermain58

For agents

markdown · JSON · MCP: product_card(name="punk-security/dnsReaper")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem