Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Discovering Subdomains

bugcrowd.com | blog | #bug-bounty | #reconnaissance | #shodan | #subdomain-discovery | #google-dorks | #crt-sh

Summary

A bug hunter's guide to subdomain discovery on wildcard scopes: combining Google dorks, VirusTotal, DNSDumpster, crt.sh certificate transparency and Shodan beats any single technique.
Published
Collected

original ↗

Related coverage

  1. The hidden cost of agentic pentesting (bugcrowd.com)
  2. Shodan: The Search Engine For Hackers (bugcrowd.com)
  3. Google Bug Hunters (bughunters.google.com)
  4. ripgen: Taking the Guesswork Out of Subdomain Discovery (bishopfox.com)
  5. XMPP: An Under-appreciated Attack Surface (bishopfox.com)
  6. 9 OSINT Tools For Your Reconnaissance Needs (bishopfox.com)

back