🌐 Subdomains Enumeration
Active
Fuzzing (Brute Force)
Gobuster
gobuster vhost -w vhost.dic -u 'http://domain.tld' --append-domain
Wfuzz
wfuzz -c -w vhost.dic -H 'Host: FUZZ.domain.tld' -u 'http://domain.tld/' --hh=186
Ffuf
ffuf -c -w vhost.dic -H 'Host: FUZZ.domain.tld' -u 'http://domain.tld/' -fs 186
Wordlist
SecLists
Pasive
Google Dorks
site:domain.tld
site:*.domain.tld
VirusTotal
Certificate of Transparency
crt.sh
© d4t4s3c 2025