sk Skill · PentesterFlow
takeover
Subdomain takeover playbook — sweep subdomains for dangling CNAMEs / NS records pointing at unclaimed third-party resources (GitHub Pages, S3, Heroku, Azure, Netlify, Shopify, ...), confirm with the engine's HTTP fingerprint, then prove impact by claiming the resource in scope. Use when enumerating subdomains for dangling CNAME/NS records pointing at unclaimed third-party services.
Open on skills.sh ↗read 2026-09-17
- installs 8w
- 0
- 30-day movement
- starts with the next reading
- Related entries
- 1
- Connections
- 4
htmlbashTypeScript
- Host repository
- PentesterFlow/agent
- Allowed tools
- http, shell, read_payloads, file_write
- Host stars
- 1,360
- Host language
- TypeScript