# Domain-Protect | OWASP Domain Protect - Prevent Subdomain Takeover **URL:** \ **Category:** Tools & Scripts\ **Tags:** tools, cloud-storage, hosting\ **Created:** [May 11, 2023, 12:16am UTC](https://onehack.st/t/domain-protect-owasp-domain-protect-prevent-subdomain-takeover/240290 "2023-05-11T00:16:42Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![Astrid](https://onehack.st/user_avatar/onehack.st/astrid/32/174869_2.png) [@Astrid](https://onehack.st/u/Astrid)\ **Post date:** [May 11, 2023, 12:16am UTC](https://onehack.st/t/domain-protect-owasp-domain-protect-prevent-subdomain-takeover/240290/1 "2023-05-11T00:16:42Z")
![image](https://onehack.st/uploads/default/original/3X/2/7/2713193081fd1c835ff99c92a12699f94fd42bcc.png) # OWASP Domain Protect [![Release version](https://camo.githubusercontent.com/4f4e9dc0beb775dfce9dd4944603f704fb1e14b9f8d7759710ce7c99cdbe913b/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f72656c656173652d76302e342e312d626c75652e737667)](https://camo.githubusercontent.com/4f4e9dc0beb775dfce9dd4944603f704fb1e14b9f8d7759710ce7c99cdbe913b/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f72656c656173652d76302e342e312d626c75652e737667) [![Python 3.x](https://camo.githubusercontent.com/c6c0bbb17cec16cec2d7da6553f8c9a1a99604f27f7c0b8e3faa957dca35bbab/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f507974686f6e2d332e782d626c75652e737667)](https://www.python.org/) [![License](https://camo.githubusercontent.com/1698104e976c681143eb0841f9675c6f802bb7aa832afc0c7a4e719b1f3cf955/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d417061636865253230322e302d626c75652e737667)](https://www.apache.org/licenses/LICENSE-2.0) [![OWASP Maturity](https://camo.githubusercontent.com/a2c74421bfb94c102942472fd201f9067446e30eaf3c38faa0667d8caeea9ab5/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6f776173702d696e63756261746f7225323070726f6a6563742d3533414145352e737667)](https://camo.githubusercontent.com/a2c74421bfb94c102942472fd201f9067446e30eaf3c38faa0667d8caeea9ab5/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6f776173702d696e63756261746f7225323070726f6a6563742d3533414145352e737667) ## Prevent subdomain takeover … [![Alt text](https://github.com/domain-protect/domain-protect/raw/main/docs/images/slack-webhook-notifications.png?raw=true "Domain Protect architecture")](https://github.com/domain-protect/domain-protect/blob/main/docs/images/slack-webhook-notifications.png?raw=true) ## … with serverless cloud infrastructure [![Alt text](https://github.com/domain-protect/domain-protect/raw/main/docs/images/domain-protect.png?raw=true "Domain Protect architecture")](https://github.com/domain-protect/domain-protect/blob/main/docs/images/domain-protect.png?raw=true) ## OWASP Global AppSec Dublin - talk and demo [![Global AppSec Dublin 2023](https://github.com/domain-protect/domain-protect/raw/main/docs/images/global-appsec-dublin.png)](https://youtu.be/fLrRLmKZTvE) ## Features - scan Amazon Route53 across an AWS Organization for domain records vulnerable to takeover - scan [Cloudflare](https://github.com/domain-protect/domain-protect/blob/main/docs/cloudflare.md) for vulnerable DNS records - take over vulnerable subdomains yourself before attackers and bug bounty researchers - automatically create known issues in [Bugcrowd](https://github.com/domain-protect/domain-protect/blob/main/docs/bugcrowd.md) or [HackerOne](https://github.com/domain-protect/domain-protect/blob/main/docs/hackerone.md) - vulnerable domains in Google Cloud DNS can be detected by [Domain Protect for GCP](https://github.com/ovotech/domain-protect-gcp) - [manual scans](https://github.com/domain-protect/domain-protect/blob/main/manual_scans/aws/README.md) of cloud accounts with no installation ## Installation - the simplest way to install is to use the separate [Domain Protect Deploy](https://github.com/domain-protect/domain-protect-deploy) repository with GitHub Actions deployment workflow - for other methods see [Installation](https://github.com/domain-protect/domain-protect/blob/main/docs/installation.md) ## Collaboration We welcome collaborators! Please see the [OWASP Domain Protect website](https://owasp.org/www-project-domain-protect/) for more details. ## Documentation [Manual scans - AWS](https://github.com/domain-protect/domain-protect/blob/main/manual_scans/aws/README.md) [Manual scans - CloudFlare](https://github.com/domain-protect/domain-protect/blob/main/manual_scans/cloudflare/README.md) [Architecture](https://github.com/domain-protect/domain-protect/blob/main/docs/architecture.md) [Database](https://github.com/domain-protect/domain-protect/blob/main/docs/database.md) [Reports](https://github.com/domain-protect/domain-protect/blob/main/docs/reports.md) [Automated takeover](https://github.com/domain-protect/domain-protect/blob/main/docs/automated-takeover.md) _optional feature_ [Cloudflare](https://github.com/domain-protect/domain-protect/blob/main/docs/cloudflare.md) _optional feature_ [Bugcrowd](https://github.com/domain-protect/domain-protect/blob/main/docs/bugcrowd.md) _optional feature_ [HackerOne](https://github.com/domain-protect/domain-protect/blob/main/docs/hackerone.md) _optional feature_ [Vulnerability types](https://github.com/domain-protect/domain-protect/blob/main/docs/vulnerability-types.md) [Vulnerable A records (IP addresses)](https://github.com/domain-protect/domain-protect/blob/main/docs/a-records.md) _optional feature_ [Requirements](https://github.com/domain-protect/domain-protect/blob/main/docs/requirements.md) [Installation](https://github.com/domain-protect/domain-protect/blob/main/docs/installation.md) [Slack Webhooks](https://github.com/domain-protect/domain-protect/blob/main/docs/slack-webhook.md) [AWS IAM policies](https://github.com/domain-protect/domain-protect/blob/main/docs/aws-iam-policies.md) [CI/CD](https://github.com/domain-protect/domain-protect/blob/main/docs/ci-cd.md) [Development](https://github.com/domain-protect/domain-protect/blob/main/docs/development.md) [Code Standards](https://github.com/domain-protect/domain-protect/blob/main/docs/code-standards.md) [Automated Tests](https://github.com/domain-protect/domain-protect/blob/main/docs/automated-tests.md) [Manual Tests](https://github.com/domain-protect/domain-protect/blob/main/docs/manual-tests.md) [Conference Talks and Blog Posts](https://github.com/domain-protect/domain-protect/blob/main/docs/talks.md) ## Limitations This tool cannot guarantee 100% protection against subdomain takeovers. ## GitHub: > **[GitHub - domain-protect/domain-protect: OWASP Domain Protect - prevent subdomain takeover](https://github.com/domain-protect/domain-protect)** > > OWASP Domain Protect - prevent subdomain takeover