https://github.com/NetSPI/crossdomainscanner

Python tool for expired domain discovery in crossdomain.xml files
https://github.com/NetSPI/crossdomainscanner

Last synced: about 1 month ago
JSON representation

Python tool for expired domain discovery in crossdomain.xml files

• Host: GitHub
• URL: https://github.com/NetSPI/crossdomainscanner
• Owner: NetSPI
• Created: 2017-01-13T21:13:36.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2017-02-21T15:06:10.000Z (over 7 years ago)
• Last Synced: 2024-05-31T08:37:13.463Z (4 months ago)
• Language: Python
• Homepage:
• Size: 18.6 KB
• Stars: 23
• Watchers: 7
• Forks: 16
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - NetSPI/crossdomainscanner - Python tool for expired domain discovery in crossdomain.xml files (Python)

README

        
# crossdomainscanner

Python tool to check for expired domains still allowed in crossdomain.xml files.

For more on this tool please go [here](https://blog.netspi.com/defeating-csrf-protections-expired-cross-domain-xml-domains/).

## Installation

```

~$ git clone https://github.com/NetSPI/crossdomainscanner

~$ cd crossdomainScanner

~$ pip install -r requirements.txt

[follow the example below for runtime usage]

```

## Example:

```

~$ python scanner.py https://jakereynolds.co -v -o output.txt

~$ cat output.txt

Searching crossdomain.xml on https://jakereynolds.co for unregistered domains

=============================================================

Crossdomain contents:

 - asdaasdasfwkjhcjhbwrgkljsv.com

 - thisisanexpireddomainaswell.es

 - thishasaninvalidTLD.invalidtld

  - Invalid TLD: invalidtld

 - jakereynoldsexpireddomain.com

Possible expired domains:

asdaasdasfwkjhcjhbwrgkljsv.com

thisisanexpireddomainaswell.es

jakereynoldsexpireddomain.com

```

This means that https://jakereynolds.co allows http://jakereynoldsexpireddomain.com in their crossdomain.xml file.  However, the latter is not registered to any DNS.  An attacker could now buy that domain and get full cross-domain access to https://jakereynolds.co

This tool is created for Ethical Hacking purposes, any illicit use is not related to its creator.