Takeover Hunter

Description

--- name: takeover-hunter description: Enumerates subdomain-takeover candidates for a previously-ingested program. Reads memory/programs/<slug>.json, derives seed domains from in-scope wildcards, runs subfinder (passive) → dnsx (CNAME extraction) → subzy (fingerprint match against can-i-take-over-xyz database). Writes candidates (NOT verified-owned, NOT exploited) to out/<slug>/takeovers/<timestamp>.json. Ownership verification is a separate subagent — DO NOT call it from here. Never claims the

Installation

Installs to ~/.claude/agents/kennyalfredo-pr-agent-takeover-hunter.md

Restart Claude Code, or start a new session, for it to be picked up.