# punk-security/dnsReaper

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

Repository: https://github.com/punk-security/dnsReaper
Canonical: https://ross.abutalabs.com/products/dnsreaper
Language: Python
License: AGPL-3.0
License Family: copyleft
Last push: 2025-10-06T10:58:46+00:00

## Health v2 (maintenance only)
Score: 58/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 45, release rhythm 51, longevity 100
- inputs: {"age_days": 1506, "days_push": 331, "days_rel": 331, "gap_med": 17, "n_releases_24m": 4}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2216, forks 195 (observed 2026-08-28T04:06:27.164571+00:00)

## What it is
DNS Reaper is a Python CLI tool that scans DNS records for subdomain takeover vulnerabilities using over 50 signatures, at roughly 50 subdomains per second. It supports fetching records directly from providers like AWS Route53, Cloudflare, and Azure, and can run in CI pipelines to block takeovers before deployment.

## Use cases
- scan my domains for subdomain takeover vulnerabilities
- find dangling cname records in my dns zone
- check aws route53 records for takeover risk as a defender
- run subdomain takeover checks in a ci pipeline
- find exploitable subdomains for bug bounty
- audit cloudflare and azure dns records for misconfigurations

## When to choose
- you need fast, accurate subdomain takeover detection with many signatures
- you want to scan your DNS estate directly via provider credentials
- you need non-zero exit codes for DevSecOps pipeline gating

## When to avoid
- you need general DNS enumeration or subdomain discovery rather than takeover detection
- you need a GUI-only workflow (the web version is limited to ~100 subdomains)
- your DNS provider is not supported and you cannot write a custom provider

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, vulnerability-scanning, networking, cli
- domain: security, penetration-testing, networking, developer-tools
- platform: cli, python, cross-platform
- tags: subdomain-takeover, dns, bug-bounty, attack-surface, devsecops, docker

## Member repositories
- punk-security/dnsReaper (main) score 58

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:27.164571+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:45:57.558906+00:00, confidence not recorded.
  - readme: https://github.com/punk-security/dnsReaper (fetched 2026-08-28T04:06:27.164571+00:00, sha 30f4c51ef017)
- Data as of 2026-08-30T08:39:29.467469+00:00.