---
id: 4782
title: "Recon Series #2: Subdomain enumeration – expand attack surfaces with active, passive techniques"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/learn-bug-bounty/subdomain-enumeration-expand-attack-surface"
published_at: "2025-02-20 18:22"
tags: ["bug-bounty", "attack-surface", "shodan", "recon", "dns", "subdomain-enumeration"]
phying_url: "https://phying.com/item/4782"
lang: en
---

# Recon Series #2: Subdomain enumeration – expand attack surfaces with active, passive techniques

## Summary

Recon series #2 on subdomain enumeration: passive techniques via Censys, Shodan and SecurityTrails, Google dorking, DNS brute-forcing and vhost fuzzing, demonstrated on the ATG bug bounty program.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2025-02-20 18:22
- **Original:** https://www.yeswehack.com/learn-bug-bounty/subdomain-enumeration-expand-attack-surface
- **Phying News:** https://phying.com/item/4782