Subdomain Hunter

• Analyzed: May 10, 2026, 6:35 AM
• Findings: 1
• Version: 1.4.0
• Hash: d5b1b8013ec1eb3a90d949cc45e26b21e631ef0a6b8fd7666e515312a18b0bf8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'edgeiq-subdomain-hunter' skill is a reconnaissance tool designed for subdomain discovery and takeover detection. While its behavior aligns with its stated purpose, it includes risky capabilities such as active network probing (DNS zone transfer/AXFR attempts) and automated subdomain bruteforcing in 'subdomain_hunter.py'. The script also contains a licensing mechanism that checks for local files and environment variables, including a hardcoded bypass for the author's email ([e-mail]). A significant coding error in the 'try_zone_transfer' function (attempting to concatenate 'str' and 'bytes') suggests the code may be untested or poorly constructed, which, combined with the active scanning features, warrants a suspicious classification.