Subdominator is a dependable and fast open-source command-line interface tool to identify subdomain takeovers.
It boasts superior accuracy and reliability, offering improvements compared to other tools.
Service fingerprint accuracy: All of them have been vetted and consolidated, so they are all accurate.
Fingerprint count: The tool has 97 service fingerprints.
Stratus Security reviewed every other tool the internet offered, and the next best was 80.
Nested DNS support: Subdominator will check the entire CNAME chain until it finds an A record, making sure nothing is missed.
Alternate DNS records: The fingerprints support A and AAAA record matching, finding takeovers that have never been detectable before.
Speed: The tool runs ~8x faster than existing tools, a test on ~100,000 records took 19 minutes for us and 2.5 hours for every other tool.
Watson told us they are currently adding support for additional fingerprints, more output formats, and validators.
The validators, in particular, will be great for cutting down on false positives from services like Azure, which historically needed to be manually checked.
They are also hoping for the community to suggest some features.
This Cyber News was published on www.helpnetsecurity.com. Publication date: Wed, 20 Dec 2023 04:13:04 +0000