PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Subdomains Tools Review: a full and detailed comparison of subdomain enumeration tools

yeswehack.com | blog | #bug-bounty | #attack-surface | #reconnaissance | #tools | #review | #dns | #subdomain-enumeration
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A full and detailed comparison of subdomain enumeration tools, reviewing their features and trade-offs to help bug bounty hunters pick the right utility for reconnaissance.
Published
Collected

Related coverage

blog · yeswehack.com
Recon Series #2: Subdomain enumeration – expand attack surfaces with active, passive techniques
Recon series #2 on subdomain enumeration: passive techniques via Censys, Shodan and SecurityTrails, Google dorking, DNS brute-forcing and vhost fuzzing, demonstrated on the ATG bug bounty program.
blog · bishopfox.com
How We Can Stop Email Spoofing
Bishop Fox scanned the Alexa top million domains and found 98% vulnerable to email spoofing; only 2% combined SPF with strict DKIM. The free SpoofCheck tool diagnoses missing defenses.
blog · netlas.io
Bug Bounty 101: Top 10 Reconnaissance Tools
A rundown of the top reconnaissance tools for bug bounty hunters, covering asset discovery, OSINT, automation and vulnerability research, and how each fits into a typical hunting workflow.
blog · netlas.io
Nmap Cheat Sheet: Top 10 Scan Techiques
A practical Nmap cheat sheet covering the ten most useful scan techniques — ping, SYN, UDP, version and OS detection and more — with tips on scope, timing and output options.
blog · netlas.io
theHarvester: a Classic Open Source Intelligence Tool
A practical guide to theHarvester: the classic open-source OSINT tool for gathering emails, subdomains and hostnames, its passive and active data sources, and real-world uses.
blog · netlas.io
Using Subfinder with Netlas Module
Step-by-step tutorial on connecting the Netlas module inside Subfinder: installing with Go, editing the config and provider-config files, running subdomain queries, and known restrictions.
Back