Use sublist3r.py to perform subdomain enumeration
Solution by Mads Frandsen.
MCSI's Online Learning Platform provides uniquely designed exercises for you to acquire in-depth domain specialist knowledge to achieve highly-regarded industry certifications that stand to advance your career.
#sublist3r.py #Subdomain-Enumeration #Subdomain-Brute-Forcing
Python is a programming language with many features including a simple syntax, powerful data structures and dynamic typing. It is used in many different domains such as web development, scientific computing, artificial intelligence and more. Python is a popular language because it is easy to learn and has many modules and libraries that allow for robust programming.
Sublist3r is a tool written in the python language which can be used to enumerate subdomains of a given domain. It works by first checking for common subdomain names using a wordlist, and then by checking for DNS records that match those names. Sublist3r is fast and easy to use, making it a valuable tool for security researchers and penetration testers.
Subdomains are a way of organizing a website into distinct sections. For example, on a website for a school, there might be a subdomain for each department (e.g. English, Math, Science, etc.), or for each grade level (e.g. Freshmen, Sophomores, Juniors, Seniors). Subdomains can also be used to create separate websites for different countries or languages. By creating subdomains, website owners can make it easier for visitors to find the information they are looking for
Subdomain enumeration is the process of identifying subdomains for a given domain. This can be useful for a variety of reasons, such as identifying potential targets for attacks, enumerating all DNS records, or discovering misconfigurations. There are a few different ways to enumerate subdomains, such as using public DNS records, WHOIS information, social engineering or brute forcing.
Sublis3r has the capability to brute force subdomains. Subdomain brute forcing is the process of using a tool to guess common subdomains for a given domain. This can be useful for finding hidden subdomains or discovering subdomains that are not listed in public records. Common techniques for subdomain brute forcing include using a word list of common subdomains, trying common aliases, and using reverse DNS lookups.
For more information on related cyber security topics visit our blog:
► Penetration Testing: https://blog.mosse-institute.com/pene...
► Red Teaming: https://blog.mosse-institute.com/red-...
If you are interested in improving your education and advancing your career in the cyber security industry, why not take a look at our Bootcamps, certifications, and career pathways blog:
► Bootcamps: https://www.mosse-institute.com/bootc...
► Certifications: https://www.mosse-institute.com/certi...
► Career pathways: https://blog.mosse-institute.com/care...
► Reviews and Testimonials: https://blog.mosse-institute.com/revi...