Security Test: Domain Takeover¶

Description¶

Default Severity: high

Domain takeover happens when attackers gain control of a domain because it's not properly managed, often due to expired services or misconfigured DNS settings. This lets an attacker redirect traffic or impersonate the legitimate site, which can lead to data theft or other harmful actions. Developers often overlook regular checks on domain configuration, fail to monitor expiration dates, or underestimate shifts in subdomain configurations, all of which can leave this vector open to exploitation.

Configuration¶

Identifier: configuration/domain_takeover

Examples¶

All configuration available:

checks:
  configuration/domain_takeover:
    skip: false # default

Compliance and Standards¶