Basics of Subdomain Takeover

Subdomain takeover occurs when a subdomain points to an abandonet third party resources that can be legitimately claimed or controlled by another party.

For example: When a company's subdomain points to any external service, but that company discontinues( deletes that service/resources, and attacker claims that same resources form her account ,then subdomain takeover is possible.

Steps To Takeover:

Step1: Open google.com
             |
Step2: Search subdomain finder.
       [Open each subdomains with status inactive]
        sublister/subfinder confirms subdomain
             |
Step3: OPEN github can I takeover and compare.
       [columns- services+errors]
             |
Step4: Open DNS Propogation to check CNAME.
             |
Step5: Then go to service to register domain.

Step1: Open google.com
             |
Step2: Search subdomain finder.
       [Open each subdomains with status inactive]
        sublister/subfinder confirms subdomain
             |
Step3: OPEN github can I takeover and compare.
       [columns- services+errors]
             |
Step4: Open DNS Propogation to check CNAME.
             |
Step5: Then go to service to register domain.

Two common methods for subdomain takeover:

1. CNAME Based Subdomain Takeover
2. NS(Name Server) Based Subdomain Takeover