Subdomain Enumeration

Question 1

What is Subdomain Enumeration?

Answer 1

Subdomain Enumeration is the process of finding valid subdomains for a domain.

Question 2

Why is Subdomain Enumeration even necessary?

Answer 2

We do Subdomain Enumeration as a means of expanding our attack radius, meaning we’ll be discovering more places of attack.

Question 3

What are our main methods of Subdomain Enumeration?

Answer 3

Brute Force, OSINT(Open-Source Intelligence), and Virtual Host

Question 4

OSINT: What are Search Engines?

Answer 4

As discussed before, search engines can be used to find certain subdomains using filters like with content discovery.

Question 5

Whats DNS(Domain Name System) Brute Force?

Answer 5

DNS Brute Force is a enumeration method that tries tens, hundreds, or even millions of possible sub domains from a predefined list of of commonly used sub domains.

Question 6

What are Virtual Hosts?

Answer 6

Websites can host multiple websites on the same server.