Subdomain Enumeration 🕵️‍♂️💻

What’s a Subdomain? 🌐🔍

A subdomain is a part of a domain that helps organize and navigate different sections of a website.

For example:

1. Domain:
   • Facebook.com → This is the domain. 🌍
2. Subdomain:
   • www.facebook.com → The "www" part is a subdomain. 🧩

Example Breakdown:

• Domain:

  example.com 🌐

• Subdomains:

  • test.example.com 🧪
  • home.example.com 🏡
  • admin.example.com 👨‍💻
  • api.example.com 🖥️

Every domain can have thousands of subdomains 🏙️. By attacking or enumerating subdomains, we can gather valuable information about the main domain. 🔓

Why Subdomain Enumeration? 🤔💡

If we attack or enumerate subdomains, we might uncover new vulnerabilities or hidden entry points into the main domain. 🚪🔓

• Subdomain enumeration helps with information gathering 🔍 and reconnaissance (recon) 🕵️‍♂️ — all the same thing.
• Bounty for internal subdomains is often higher than for normal subdomains. 💰
• Note: Multiple subdomains or domains might be hosted on the same IP address 🌐💻.

How to Get Subdomains? 🛠️🔧

There are several ways to gather subdomains:

Websites for Subdomain Enumeration 🌍: