{"repo":"indianajson/can-i-take-over-dns","free":true,"listed":false,"github":"https://github.com/indianajson/can-i-take-over-dns","clone":"git clone https://github.com/indianajson/can-i-take-over-dns.git","description":"\"Can I take over DNS?\" — a list of DNS providers and how to claim vulnerable domains.","language":null,"stars":1101,"topics":["dns","subdomain-takeover","domain-takeover","nameservers","dangling-dns","infosec","bugbounty","bugbountytips","takeover-subdomain","hacking"],"license":null,"category":"networking-infra","readme_excerpt":"Can I Take Over DNS? A list of DNS providers and whether their zones are vulnerable to DNS takeover! Maintained by   Inspired by the popular Can I Take Over XYZ? project by @EdOverflow this project is uniquely oriented towards DNS takeovers. DNS takeovers pose a high threat to companies, warrant high bounties, and are easy to find. We are trying to make this list comprehensive, so please contribute! Reporting to Bug Bounty Programs Here's a public $500 bounty report for a DNS takeover that I wrote with a thorough explanation to help you understand the issue and give you a template for how to write your own report. Remember, always create a valid proof of concept (like the text record I added to the DNS zone in this report) before you report an issue to a bug bounty program, this will save time and get you paid faster. This list is updated infrequently (due to the fact things don't change that fast), so it is possible something listed below as Vulnerable is now Not Vulnerable . To that end, be sure to always perform a proof of concept takeover before reporting. DNS Providers These companies provide DNS nameserver services to the general public. In this list you will find out whether domains pointing to these nameservers are vulnerable to DNS takeover and where you can learn more about them. Provider Status Fingerprint Takeover Instructions --------------------------------------------- -------------- ----------------------------------------------------------------------- -","default_branch":null,"files":null,"tree":[],"storefront":"/r/indianajson","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/indianajson/can-i-take-over-dns/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}