v3.0.0

What's New

subjack is now a comprehensive DNS Takeover Scanner covering multiple attack vectors beyond CNAME hijacking.

New Detection Capabilities

• Stale A record detection — finds dead IPs on AWS, GCP, Azure, DigitalOcean, Linode, Vultr, and Oracle Cloud (-ar)
• Dangling NS delegation checks — detects deleted cloud DNS zones on Route53, Google Cloud DNS, Azure DNS, and more (-ns)
• Zone transfer (AXFR) detection — with NS hostname bruteforcing (-axfr)
• SPF include takeover — expired domains in SPF records (-mail)
• MX record takeover — expired mail server domains (-mail)
• CNAME chain takeover — multi-level CNAME chains up to 10 deep
• SRV record takeover — SRV targets pointing to registrable domains
• Azure Traffic Manager verification — reduces false positives via API check

Improvements

• Concurrency limits and consistent timeouts
• NXDOMAIN detection via DNS rcode instead of error string parsing
• S3 CNAME pattern tightened to avoid false matches on ELB
• Stdin support for piping domain lists
• All results written to output file (not just vulnerable ones)
• Updated and cleaned fingerprints (removed Heroku, Fastly)
• DNS lookup timeout to prevent hanging

Housekeeping

• Unit tests for provider detection, DNS patterns, and fingerprint validation
• Removed dead code

Full Changelog: v2.2.0...v3.0.0