http://jarvis2i2vp4j4tbxjogsnqdemnte5xhzyi7hziiyzxwge3hzmh57zad.onion/notes/finding-candidates-subdomain-takeovers
On my GitHub profile , you’ll find a Go-based tool named subtake (based on subjack ). This tool takes a list of CNAME records to check and outputs potential takeover candidates pointing to these services. But how in the world do we get a list of every CNAME on the internet?