Enumerate subdomains and gather DNS records using subfinder, amass, and dnsx.
npx skills add https://github.com/crazyMarky/pentest-skills --skill recon-subdomain
Please help me install this Agent Skill. Skill: recon-subdomain Source: https://github.com/crazyMarky/pentest-skills/tree/main/recon-subdomain Command: npx skills add https://github.com/crazyMarky/pentest-skills --skill recon-subdomain
This Skill helps you uncover all subdomains associated with a target domain, revealing a broader attack surface that might otherwise go unnoticed.
dev.example.com, api.example.com, or staging.example.com to identify potential entry points.Find all subdomains for example.com and save them to a file named resolved_subs.txt.
High-intent search queries and answers about installing and using this skill.
To discover hidden subdomains and map an attack surface, you can perform subdomain enumeration using passive and active techniques to uncover all associated domains for a target.
The best way to gather DNS records and verify subdomain resolution is by running DNS reconnaissance alongside subdomain enumeration to validate that discovered targets actively resolve.
Yes, you can leverage subfinder and amass together for subdomain enumeration, combining their passive and active discovery techniques to achieve more thorough target coverage.
To find all associated subdomains like dev or api for a web application, perform comprehensive enumeration against the target domain to identify potential entry points across the expanded attack surface.
Subdomain enumeration identifies potential vulnerabilities by expanding the attack surface, utilizing both passive and active techniques to reveal hidden subdomains that might otherwise go unnoticed.
AeonDaveResolve DNS records and brute-force subdomains from domain lists.
uphiagoDiscover registered subdomains via certificate transparency logs and public APIs.
L3DigitalNetScan networks for hosts, ports, services, and operating systems using nmap.
macaughEnumerate subdomains via passive sources and active DNS techniques.