← All tool guides

Sub-Domain TakeOver

Auto-generated by Q-Branch Armory audit on 2026-10-12.

Overview

Sub-domain takeover vulnerability occur when a sub-domain

(subdomain.example.com) is pointing to a service (e.g: GitHub, AWS/S3,..)

that has been removed or deleted.

Usage:python3 takeover.py -d www.domain.com -v

Classification

  • **Category:** Web Attack tools
  • **Armory status:** Installed (source present: takeover)
  • **Q-Branch check:** Installed — launch path not in PATH
  • **Present on VPS3:** yes
  • **Installed flag:** yes

    • Prerequisites

  • docker
  • go
  • java
  • root
  • ruby
  • wifi

    • Install

    
git clone https://github.com/edoardottt/takeover.git
cd takeover && pip install --user .

    Operator notes

  • Launch from the [Digital Armory](/pentest/armory/) — do not maintain parallel tool lists in Q-Branch.
  • If the Q-Branch check is not **Ready**, run install steps or update the HackingTool manifest before relying on this tool in an engagement.
  • For authorized TenguProtect red-team work only.

    • Reference

    https://github.com/edoardottt/takeover