haccer/subjack

Health v2 · maintenance only

Adoption not part of the score

2109 stars · 349 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Subjack is a DNS takeover scanner written in Go that concurrently scans lists of subdomains to identify ones vulnerable to hijacking. It detects dangling CNAMEs, NS delegations, stale A records, zone transfers, SPF/MX/SRV takeovers, and registrable NXDOMAINs.

Use cases

• scan a list of subdomains for takeover vulnerabilities
• find dangling CNAME records pointing to unclaimed services
• check for expired nameserver and cloud DNS zone takeovers
• detect misconfigured zone transfers leaking DNS records
• identify SPF and MX records on expired domains for email spoofing
• mass-test domains during bug bounty reconnaissance

When to choose

• you need fast, concurrent mass-scanning of subdomain lists for DNS takeovers
• you want broad coverage including NS, A record, AXFR, SPF, MX, and SRV takeover checks
• you are doing bug bounty or penetration testing reconnaissance in Go

When to avoid

• you need a GUI or managed continuous monitoring service rather than a CLI scanner
• you require guaranteed accuracy without manual verification, since results can include false positives
• you need non-DNS web application vulnerability scanning

Facets

cli-tool · maturity active

security networking cli developer-tools security penetration-testing networking developer-tools windows cli go subdomain-takeover dns bug-bounty pentesting dns-takeover recon linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="haccer/subjack")