DNS Recon
Guides
- Subdomain Enumeration Workflow by 0xpatrik
Tools
- findsubdomains.com
- Certificate Transparency Search
- altdns - Alterations/Permutations to DNS
- dnssearch - Lightweight DNS Enumeration Tool
- fierce - Hunt for IP space by dns enumeration and looking for nearby IPs
- subfinder - Subdomain discovery tool from passive online sources.
- Sublist3r - OSINT based DNS enumeration