Oct 18, 2020 · Takeover AWS ips and have a working POC for Subdomain Takeover. Idea is simple. Get subdomains. Do reverse lookups to only save AWS ips. Restart EC2 instance every min. and public ip gets rotated on each restart. Match it with your existing list of subdomain ips and you have a working subdomain takeover POC.
subdomain takeover tool github