Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Using TLDFinder with Netlas

netlas.io | blog | #attack-surface | #tutorial | #subdomain-enumeration | #netlas | #tldfinder

Summary

Hands-on guide to TLDFinder with Netlas: setting up Go on Ubuntu, installing TLDFinder, configuring the Netlas source, and enumerating TLDs and subdomains for attack surface analysis.
Published
Collected

original ↗

Related coverage

blog · netlas.io
Using Subfinder with Netlas Module
Step-by-step tutorial on connecting the Netlas module inside Subfinder: installing with Go, editing the config and provider-config files, running subdomain queries, and known restrictions.
blog · netlas.io
Using theHarvester with Netlas
Tutorial on using theHarvester with the Netlas integration for OSINT and subdomain discovery: four installation options, connecting the Netlas API key, and the data types the Netlas database offers.
blog · netlas.io
Using Maltego with Netlas Module
Instructions for using the Netlas module in Maltego: plugin installation, supported transforms, API key setup, Community Edition result limits, and how transforms count against monthly quotas.
blog · netlas.io
Plug & Pwn: Mapping the Windows PnP Auto-Install Attack Surface
Netlas maps Windows PnP auto-install from DEF CON's Plug & Pwn: the OS fetches and runs vendor packages as SYSTEM; the remote variant rides authenticated RDP, so exposure can be scoped from outside.
blog · netlas.io
Discovering Data Exposure with Netlas
How to find exposed configs, API keys, database credentials, bearer tokens and debug outputs at scale using Netlas response data — mapped to OWASP Top 10:2025 exposure categories.
blog · netlas.io
Telegram Bot API Abuse
Threat actors abuse Telegram's Bot API as a covert channel for phishing, telemetry and malware delivery; Netlas hunts surface Xeno lures and fake Adobe updates with stable detection anchors.
back