Linux 软件免费装

在这里免费安装WordPress以及其他软件

Banner图

BeleGuard Domain Scanner

开发者 beletech76
freemius
更新时间 2026年10月20日 06:00
PHP版本: 7.4 及以上
WordPress版本: 7.1
版权: GPLv2 or later
版权网址: 版权信息

标签

security vulnerability scanner dns subdomain

下载

0.1.2

详情介绍:

BeleGuard Domain Scanner checks your subdomains for "dangling CNAME" records: DNS entries that still point to a cloud resource (GitHub Pages, Heroku, Amazon S3, and others) that has since been deleted or deprovisioned. If an attacker claims that same resource name on the cloud provider, they can serve content — including phishing pages — under your own trusted domain. Free version: scans a list of common subdomain prefixes of your own domain, and scans the outbound links found in your published posts and pages for third-party subdomains that may have been abandoned by the sites you link to. Pro version: reads your real DNS zone directly through your DNS provider's API (Cloudflare or Amazon Route53) instead of guessing subdomains from a wordlist — exhaustive, no false negatives from an incomplete wordlist, and works even when your domain is behind the Cloudflare proxy.

安装:

  1. Upload the beleguard-domain-scanner folder to /wp-content/plugins/.
  2. Activate the plugin from the "Plugins" menu in WordPress.
  3. Go to Settings > BeleGuard Domain Scanner to run your first scan.

常见问题:

Does the plugin modify my site or my DNS?

No, BeleGuard Domain Scanner is read-only: it only reads DNS records and public HTTP responses to detect abandoned cloud resources. It never creates, modifies, or claims any resource.

What data is sent outside my site?

On each scan of your own subdomains, the plugin resolves DNS records for a list of common subdomain prefixes of your domain, and makes a plain HTTP request to any subdomain whose DNS record matches a known cloud provider pattern, to confirm whether the resource is unclaimed. No personal data, site content, or user data is sent. The Pro version additionally connects to your DNS provider's API (Cloudflare or Amazon Route53) using credentials you provide yourself, to read your DNS zone's records. These credentials are stored in your site's database and are never transmitted anywhere except directly to the DNS provider's own API.

更新日志:

0.1.2 0.1.1 0.1.0