Download
takeover-guard is an open-source, automated DNS reconnaissance engine and dangling record scanner developed by SubDomainWatch (https://subdomainwatch.com).
It detects vulnerable CNAME, MX, and NS records pointing to unclaimed third-party services and cloud infrastructure before attackers can exploit them for subdomain takeovers.
Key Capabilities:
• Multi-Cloud Fingerprinting: Detects unclaimed assets across 25+ major cloud providers (AWS S3, GitHub Pages, Heroku, Azure, Cloudflare, Fastly, Shopify, and more).
• Recursive CNAME Resolution: Traverses chained alias records to expose root dangling targets.
• High-Concurrency Probing: Fast asynchronous DNS querying designed for blue teams, bug bounty hunters, and enterprise attack surface management.
• Continuous Pipeline Integration: Run standalone or embed into CI/CD security workflows.
Live platform & continuous monitoring: https://subdomainwatch.com
GitHub: https://github.com/SubdomainWatch/takeover-guard
Features
- Subdomain takeover detection across 25+ cloud providers
- Recursive CNAME chaining and dangling alias analysis
- High-speed asynchronous DNS resolution engine
- CI/CD security scanning pipeline integration
- Automated attack surface mapping and vulnerability auditing
