Скачать или смотреть Subdomain Takeovers, beyond the basics for Pentesters and Bug Bounty Hunters

Discover the tricks to subdomain takeovers that go beyond the basics, allowing you to find more impactful findings in a pentest, or on a bug bounty program.

▬ Continue the discussion ▬▬▬▬▬▬▬▬
✭ Twitter:   / codingo_  
✭ Patreon:   / codingo  
✭ Facebook:   / codingo  

▬ Table of Contents ▬▬▬▬▬▬▬▬▬▬▬
0:00 Introduction
0:36 Bias / Caveats
2:05 What are most people doing wrong?
3:31 Brute53 Example
4:09 What should you do?
4:30 Indirect usage of Can-I-Take-Over
5:29 Unique Detection Methods
7:04 Unique ways to think about STO
8:24 How do you start making changes today?
8:46 Who to follow to learn more

▬ Common Subdomain Takeover Tools ▬▬▬▬▬▬▬▬
✭ https://github.com/anshumanbh/tko-subs
✩ https://github.com/Ice3man543/SubOver
✭ https://github.com/subjack
✩ https://github.com/antichown/subdomai...
✭ https://github.com/LukaSikic/subzy

▬ People to Follow ▬▬▬▬▬▬▬▬
✩   / 0xpatrik  
✭   / fransrosen  
✩   / infosec_au  

▬ Learn More ▬▬▬▬▬▬▬▬
✭    • @0xpatrik explains his DNS enumeration wor...