Skill UI

This skill provides a comprehensive methodology for discovering and exploiting broken link hijacking vulnerabilities. By spidering a target site and extracting all external scripts, domains, and references, the skill checks the DNS and domain registration status. It is crucial for conducting subdomain takeover testing, supply-chain security reviews of third-party resources, and advanced bug bounty hunting.

This playbook details the methodology for detecting and exploiting subdomain takeover vulnerabilities. It focuses on identifying CNAME/NS/MX records pointing to deprovisioned or unclaimed cloud resources (e.g., AWS S3 buckets, Heroku apps). Understanding these weaknesses allows attackers to serve malicious content under the victim's trusted domain, leading to phishing, credential theft, and security bypasses.

This skill enables security professionals to identify subdomain takeover vulnerabilities by enumerating subdomains, analyzing DNS records, and verifying unclaimed third-party resources. It is used in authorized security assessments to find high-value targets like GitHub Pages, GitLab Pages, or S3 buckets that can be exploited to serve malicious content under a trusted domain.