autoSubTakeover

A tool used to check if a CNAME resolves to the scope address. If the CNAME resolves to a non-scope address it might be worth checking out if subdomain takeover is possible. Also checks if the domain that a subdomain points to is expired.

Requirements (also in requirements.txt)

Click==7.0
pycares==3.0.0
tornado==6.0.3
aiodns==2.0.0
asyncio==3.4.3
tldextract==2.2.2

Installation

install the package through pip:

  pip install autosubtakeover

or by building it from source:

   git clone https://github.com/JordyZomer/autoSubTakeover
   cd autoSubTakeover
   python setup.py install

Usage

This is how you can run the tool, please make sure that your arguments point to valid files that contain each entry on a new line.

Usage: autosubtakeover [OPTIONS]

  AutoSubTakeover by Oblivion, Mantis and Zoidberg

Options:
  --domains TEXT      Domains to brute.
  --nameservers TEXT  Nameservers to use.
  --wordlist TEXT     Wordlist of subdomains.
  --help              Show this message and exit.

Note

This project is licensed under the MIT license, even though I don't really care what you do with it I do appreciate credits!

Potential dependency conflicts between autosubtakeover and idna

Hi, as shown in the following full dependency graph of autosubtakeover, tldextract requires idna * ， while the installed version of requests(2.22.0) requires idna >=2.5,<2.9.

According to Pip's “first found wins” installation strategy, idna 2.8 is the actually installed version.

Although the first found package version idna 2.8 just satisfies the later dependency constraint （idna >=2.5,<2.9), it will lead to a build failure once developers release a newer version of idna.

Dependency tree--------


autosubtakeover - 0.1
| +- aiodns(install version:2.0.0 version range:*)
| | +- pycares(install version:3.0.0 version range:>=3.0.0)
| | | +- cffi(install version:1.13.2 version range:>=1.5.0)
| | +- typing(install version:3.7.4.1 version range:*)
| +- asyncio(install version:3.4.3 version range:*)
| +- click(install version:7.0 version range:*)
| +- pycares(install version:3.0.0 version range:*)
| | +- cffi(install version:1.13.2 version range:>=1.5.0)
| +- tldextract(install version:2.2.2 version range:*)
| | +- idna(install version:2.8 version range:*)
| | +- requests(install version:2.22.0 version range:>=2.1.0)
| | | +- certifi(install version:2019.9.11 version range:>=2017.4.17)
| | | +- chardet(install version:3.0.4 version range:<3.1.0,>=3.0.2)
| | | +- idna(install version:2.8 version range:>=2.5,<2.9)
| | | +- urllib3(install version:1.25.7 version range:<1.26,>=1.21.1)
| | +- requests-file(install version:1.4.3 version range:>=1.4)
| | | +- requests(install version:2.22.0 version range:>=1.0.0)
| | | | +- certifi(install version:2019.9.11 version range:>=2017.4.17)
| | | | +- chardet(install version:3.0.4 version range:<3.1.0,>=3.0.2)
| | | | +- idna(install version:2.8 version range:>=2.5,<2.9)
| | | | +- urllib3(install version:1.25.7 version range:<1.26,>=1.21.1)
| | | +- six(install version:1.13.0 version range:*)
| | +- setuptools(install version:42.0.1 version range:*)
| +- tornado(install version:6.0.3 version range:*)

Thanks for your attention.
Best,
Neolith

jordyzomer / autosubtakeover Goto Github PK