Skip to content
This repository has been archived by the owner on Dec 18, 2018. It is now read-only.

Domain Hijacking Auditor for Cloud Inquisitor

Notifications You must be signed in to change notification settings

RiotGames/cinq-auditor-domain-hijacking

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

57 Commits
 
 
 
 
 
 
 
 

Repository files navigation

cinq-auditor-domain-hijacking

Please open issues in the Cloud-Inquisitor repository

Description

This auditor Checks DNS resource records for any pointers to non-existing assets in AWS (S3 buckets, Elastic Beanstalks, etc) and alerts to indicate there is a vulnerability.

Configuration Options

Option name Default Value Type Description
enabled False bool Enable the Domain Hijacking auditor
interval 30 int How often the auditor runs, in minutes
email_recipients ['[email protected]'] array List of emails to receive alerts
hijack_subject Potential hijack detected string Email subject for domain hijack notifications