Domain-Protect - OWASP Domain Protect - Prevent Subdomain Takeover

OWASP Global AppSec Dublin - talk and demo

Features

• scan Amazon Route53 across an AWS Organization for domain records vulnerable to takeover
• scan Cloudflare for vulnerable DNS records
• take over vulnerable subdomains yourself before attackers and bug bounty researchers
• automatically create known issues in Bugcrowd or HackerOne
• vulnerable domains in Google Cloud DNS can be detected by Domain Protect for GCP
• manual scans of cloud accounts with no installation

Installation

• the simplest way to install is to use the separate …

amazon appsec attackers aws bounty bug bug bounty bugbounty bugcrowd cloudflare demo dns domain domain-protect domains dublin features global google hackerone organization owasp protect researchers route53 scan security tools subdomain subdomains subdomain takeover takeover terraform vulnerable