Loading…
Claim a dangling DNS record pointing to a deprovisioned service (subdomain takeover). Load after subdomain enum, on CNAMEs to cloud services, "NoSuchBucket"/"404 there isn't a GitHub Pages site here", or dangling A/CNAME. Signals: CNAME → S3/GitHub/Heroku/Azure/Fastly with a fingerprint error page.
web-subdomain-takeover is an agent skill entry in ChatHome Skills, sourced from GitHub Skill Search and scored 58/100. # Subdomain takeover ## When it applies A subdomain's DNS still points (CNAME/A) to a third-party service that no longer has the resource provisioned, so you ca. As an agent skill, it packages a reusable instruction set that AI coding agents such as Codex and Claude Code can load to perform this task without hand-written glue code. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding web-subdomain-takeover to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.
codex skill install NoorQureshi/security-skillsReview the upstream source before running this command.
Scan coverage: Install metadata and the indexed document body.
Automated signals from install metadata and a bounded skill body — not a full code security audit and not a recursive source or dependency review.
# Subdomain takeover ## When it applies A subdomain's DNS still points (CNAME/A) to a third-party service that no longer has the resource provisioned, so you can register it and se