Skip to content

Latest commit

 

History

History
33 lines (22 loc) · 948 Bytes

README.md

File metadata and controls

33 lines (22 loc) · 948 Bytes
Raw

NS Takeover - Azure

Takeover domains vulnerable to Name Server takeover pointing to Azure DNS.

Prerequisites

  • Azure CLI pip3 install azure-cli==2.4.0
  • Python3

Usage:

$ python3 nstakeoverazure.py <domain> <nameserver number>

Consider the domain hackmeplease.tk as vulnerable having SERVFAIL status when resolving and it's nameservers are:

hackmeplease.tk.            5       IN      NS      ns1-35.azure-dns.com.
hackmeplease.tk.            5       IN      NS      ns2-35.azure-dns.net.
hackmeplease.tk.            5       IN      NS      ns3-35.azure-dns.org.
hackmeplease.tk.            5       IN      NS      ns4-35.azure-dns.info.

Note: To find nameservers of SERVFAIL status domain/subdomain, use command dig +trace hackmeplease.tk

$ python3 nstakeoverazure.py hackmeplease.tk 35

Image