Software Securityhome
Fix a findingSearch
Glossary

Subdomain takeover

Someone else gains control of content served on one of your subdomains because a DNS record still points to a cloud or SaaS resource you released, and the provider lets them claim it. The subdomain then receives cookies and trust meant for your domain.

Covered in

Guide

Prevent subdomain takeover from dangling DNS records

A DNS record that outlives its cloud resource lets whoever claims the name serve content on your domain. Bind records to resources in IaC, remove the record first, verify domains and scan for dangling records.

Find your next answer

Type to search. Search runs in your browser.

Searches run in your browser, but the host can infer them from the index files they load. The address shows your search so you can bookmark or share it.