As a user of the internet, you will have realized that multiple search engines such as MSN, Google, Yahoo, and Bing frequently learn and index new and existing websites to improve their search results. If you search for a company's website, you are most likely to discover the main domain name, such as company.com. A lot of organizations create subdomains for various reasons, however. As penetration testers, we would like to discover all the possible subdomains of a target organization as they can lead to login portals and sensitive corporate directories, which may contain confidential files and resources.
We can leverage the power of search engines for this task using the Sublist3r tool. Sublist3r is a Python-based tool that is used to enumerate (extract/obtain) the subdomains of a given website using OSINT, such as search engines and other...
