Posts

Showing posts with the label network

How to find subdomains of a domain

Image
What is a subdomain? A subdomain is a part of the main domain that can be used to separate your website.  For example, if "example.com" is your root domain, you can use subdomains such as "blog.example.com", "shop.example.com", and "docs.example.com". Then why would one want to find subdomains of a domain? Finding subdomains is an important step to collect data for a penetration test. People usually put enough efforts to keep their main root domain secure, but are more likely to neglect doing the same to their subdomains because they think it's hard to find them. However, if you use existing online subdomain scanner tools, you will see that they can find subdomains pretty well. example: a part of search results of google.com from  pentest-tools   To make sure all your websites and services are secure enough, you might want to find all subdomains including ones with vulnerabilities but you have forgotten. For another example, if you are managi