Mark HuntThere has to be a better way, right? Brute force can’t be the best way to enumerate zones of subdomains. #pentesting #hacking #dns #zone #enumeration #hackthebox
Patrick Mevzek@thefreehunter There are various heuristics techniques for sub domains enumeration needs. Some articles: https://book.hacktricks.xyz/network-services-pentesting/pentesting-dns or https://blog.appsecco.com/a-penetration-testers-guide-to-sub-domain-enumeration-7d842d5570f6?gi=ffe2c76d1513 ; and a tool: https://github.com/rbsec/dnscan