S-Over - Subdomain Takeover Scanner

S-Over is a powerful and highly concurrent subdomain takeover detection tool, built using Python's asyncio and aiohttp ecosystem. It uses DNS and HTTP fingerprinting to detect dangling or misconfigured subdomains that could potentially be hijacked by attackers.

Features

• 🚀 Fast and asynchronous domain scanning
• 🕵️‍♂️ Supports both CNAME and A record detection
• 🌐 HTTP content fingerprinting for over 50+ services
• 💡 NXDOMAIN verification for dangling CNAMEs
• 📁 Optional output to JSON
• 🎛️ Custom concurrency and timeout settings
• 🧪 Rich terminal output (using Rich library)
• 🔍 Debug mode for detailed inspection

Requirements

• Python 3.7+
• Dependencies:
  • aiohttp
  • aiodns
  • rich

You can install the dependencies using:

pip install -r requirements.txt

Usage

python s-over.py -f subdomains.txt -p fingerprints.json -c 100 -t 10 -o results.json

Options

Fingerprint Format

The fingerprints.json should contain an array of service entries like:

[
  {
    "service": "GitHub Pages",
    "cname": ["github.io"],
    "nxdomain": true,
    "fingerprint": ["There isn't a GitHub Pages site here."]
  }
]

Sample

cat subdomains.txt | python s-over.py --debug

License

This project is developed by HaxorSec - 2025 ©. All rights reserved.

Disclaimer

This tool is intended for educational and authorized security testing purposes only. Use it responsibly.