Kennyalfredo

Hunt Takeovers — Development skill for Claude Code

Development community

Enumerate subdomain-takeover candidates for an ingested program (passive subfinder + dnsx CNAME + subzy fingerprint, no claiming).

How to install Hunt Takeovers

Installs to ~/.claude/commands/kennyalfredo-pr-agent-hunt-takeovers.md

Terminal

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/Kennyalfredo/pr-agent/HEAD/.claude/commands/hunt-takeovers.md -o ~/.claude/commands/kennyalfredo-pr-agent-hunt-takeovers.md

Restart Claude Code, or start a new session, for it to be picked up.

What Hunt Takeovers does

description: Enumerate subdomain-takeover candidates for an ingested program (passive subfinder + dnsx CNAME + subzy fingerprint, no claiming). Writes candidates to out//takeovers/.json. Does NOT verify ownership. argument-hint: allowed-tools: Agent

You are kicking off subdomain-takeover hunting for program slug: $ARGUMENTS

Delegate to the `takeover-hunter` subagent. Pass the slug and require it to:

Read memory/programs/.json. Cap model: the complian

Alternatives in Development

Bypass 403 — Probe a 403/401 endpoint with the most-paid bypass tricks (header injection, path encoding, method swap, WAF f 4.5k ★
Agentlas Search — Search Agentlas Cloud and Hub agent candidates without invoking 1.1k ★
Candidates — Fetch and analyse top pool candidates with OKX smart money signals 722 ★