Cara Cek Subdomain Takeover Sendiri

6ickzone 0


Belajar dari domain 0x6ick.zone.id

Di dunia hacking, subdomain takeover itu serangan yang paling sering dipakai buat nge-bajak subdomain orang lain. Kalau kamu punya blog, website, atau subdomain gratisan, kamu WAJIB ngerti cara cek ini! 

Apa Itu Subdomain Takeover?

Singkatnya, ini serangan di mana hacker mengambil alih subdomain yang:

  • Mengarah ke layanan pihak ketiga (Blogger, GitHub Pages, Vercel, Netlify)
  • Tapi subdomain itu nggak aktif atau udah nggak di-claim pemiliknya

Kalau subdomain kamu kosong, hacker bisa ambil alih dan upload konten sendiri. Bahaya kan?

Ciri-Ciri Subdomain Rawan Takeover

  • Muncul error seperti: 404 Not Found, No such app
  • CNAME record aktif, tapi nggak ngarah ke project yang valid
  • DNS record pointing ke platform tapi belum diklaim

Tools Gratis Buat Cek Subdomain Takeover

1. SecurityTrails (Online)

Masuk ke:
https://securitytrails.com/domain/0x6ick.zone.id/dns

2. crt.sh (Cek Subdomain dari SSL)

Masuk ke:
https://crt.sh/?q=%.0x6ick.zone.id

Cara Manual Cek Subdomain Takeover

  1. Ping subdomain kamu:
    2. ping sub.0x6ick.zone.id
  2. Buka di browser, cek kalau muncul error seperti:
    - 404 Not Found
    - No such app
    - This page is not available
  3. Liat DNS Record — pastikan subdomain kamu nggak ngarah ke platform yang udah gak aktif.

Platform yang Sering Jadi Target Takeover

  • ghs.google.com (Blogger)
  • github.io (GitHub Pages)
  • cname.vercel-dns.com (Vercel)
  • netlify.app (Netlify)
  • herokuapp.com (Heroku)
  • azurewebsites.net (Azure)

Bonus: Tools Buat Hunter

  • Subjack
  • Subzy
  • Nuclei Templates (takeover.yaml)

Contoh command:

subjack -w subs.txt -t 100 -timeout 30 -o results_takeover.txt -ssl

Tips Supaya Domain Aman

  • ✅ Audit DNS record minimal sebulan sekali
  • ✅ Jangan biarkan subdomain nganggur
  • ✅ Hapus DNS record yang udah nggak dipakai
  • ✅ Pakai Google Search Console buat monitor subdomain aneh

Penutup

Kalau kamu serius main di dunia web, hacking, bug bounty, atau blogger, wajib paham tentang subdomain takeover ini. Jangan sampai blog kamu jadi korban gara-gara salah setting DNS!

Selamat audit domain bro! Kalau artikel ini bermanfaat, jangan lupa share ke sesama heker!:v

Stay safe, stay 0x6ick!

🔗 Follow tools & resource gue di: linktr.ee/6ickzone
🔥 Blog: www.0x6ick.zone.id

Tags

6ickzone

I've been deep in the world of cybersecurity, crypto, AI, and hacking for years. This blog is where I share my journey, tools, tips, and everything I learn along the way. But beyond code and exploits, there's also rhythm. I'm also exploring the digital soundscape — producing beats, fusing dark tech vibes with trap, drill, and EDM. Music is my second language, and it's where I channel the energy of the underground digital world. From my early days as a defacer to my current focus on ethical hacking and experimental music, I’m building 6ickzone as a hybrid space where hacking meets art. Why 6ickzone? 6ickzone is more than just a blog — it's a realm where hackers, beatmakers, and digital renegades gather. Whether you're here for the tools or the tunes, welcome to the zone.

Post a Comment

Posting Komentar

Lebih baru Lebih lama

Mengenai Saya

Foto saya
6ickzone
I've been deep in the world of cybersecurity, crypto, AI, and hacking for years. This blog is where I share my journey, tools, tips, and everything I learn along the way. But beyond code and exploits, there's also rhythm. I'm also exploring the digital soundscape — producing beats, fusing dark tech vibes with trap, drill, and EDM. Music is my second language, and it's where I channel the energy of the underground digital world. From my early days as a defacer to my current focus on ethical hacking and experimental music, I’m building 6ickzone as a hybrid space where hacking meets art. Why 6ickzone? 6ickzone is more than just a blog — it's a realm where hackers, beatmakers, and digital renegades gather. Whether you're here for the tools or the tunes, welcome to the zone.
Lihat profil lengkapku

Cari Blog Ini

About