Alternatives
Products that do what Subdomain Takeover Checker does
Detect subdomain takeover vulnerabilities for free
- 1FS
Hello! I'm learning Rust and also information security, so what better way to learn than to put a tool together practicing both skills? I've tried to use a couple of different tools for subdomain enumeration (part of the Discovery-party when it comes to penetration testing), but none of them were very fast, even if the DNS resolver I pointed them towards is, so I wrote my own tool that leverages concurrency to check a lot of subdomains, fast! It's written in Rust, main parts being using Tokio and async_channels, and I think it works good enough for a first release. I wanted to get recursive…
2022 · github.com
- 2IA
IPDetective collects data from about 60+ different sources such as official cloud provider endpoints and public VPN/Proxy/Tor/Bot net lists. Then aggregates this data into a fast and easy to use API that can be integrated into applications or scripts easily. IPDetective started as a hobby project for my other hobby projects :) and I decided to wrap a simple website around and offer it as a service. Let me know what your thoughts, if you find value in this service or if you have any feature requests.
2022 · ipdetective.io
- 3OT
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com
- 4FA
2013 · instantname.me
- 5

- 6

- 7

- 8

- 9DI
2015 · domainwatcher.io
- 10

- 11

- 12

Detect domain security issues before they hurt your business
May 2026 · domainscan.tools
- 13ST
I wrote a script to scan top sub-reddits and calculate the total number of malicious domains associated to the links posted.
2024 · pangea.cloud
- 14
- 15UC
I found out Cloudflare has a DNS over HTTPS api via 1.1.1.1 resolver, figured I'd make a small tool out of it, as somene who keeps checking domain names for side projects which I never build, this kinda helps me look for something. It's not fully accurate, because it returns unavailable even for parked pages, which technically are available, but works for me. It just checks for A records via this endpoint https://cloudflare-dns.com/dns-query?name=${domain}&type=A Just make sure to pass this header - "application/dns-json"
2024 · supersaas.dev
- 16GW
2025 · wildcard.jolly-ops.com
- 17IB
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com
- 18

- 19

- 20SE
2024 · github.com
- 21

- 22WF
This can be used to find phishing domains or domains matching any pattern you want if you select "custom filter." You can also connect over WebSocket at /ws and use any programming language you want. There may be duplicates because some domains are published in multiple logs. I get data from all of the logs currently included with Chrome, a list of which is available here: https://github.com/google/certificate-transparency-community....
2024 · firehose.lol
- 23

- 24OD
Hey HN! We built DNS Directory (https://dnsdirectory.com), a free, searchable database of public DNS servers with live monitoring every 10 minutes. We needed to find an up-to-date list of DNS servers used by carriers around the world for a proxy fingerprinting / web-scraping project but we were shocked to find that it didn’t exist so we built it ourselves in an internal Hackathon We’re adding more features but so far we: Test 77K+ servers every ~10 minutes Allow filtering by uptime, location, security features (ad blocking, malware protection, DNSSEC) Show info on IPv6…
Dec 2025 · dnsdirectory.com
Ranked by how close each launch is in meaning, then by votes. Refine with a description →