Chuck Keith’s Post

View profile for Chuck Keith
Chuck Keith

NetworkChuck

What subdomain enumeration tool is the best?

  • No alternative text description for this image
Kenneth Strawn

SRT Operator @ Synack | Cybersecurity + MESA @ Saddleback College | CAPE | CPTS | CEHv12 | Cybersecurity YouTuber, content creator, and certification reviewer | `cargo build --target=x86_64-unknown-none` since 2020

1d

Either `dig axfr` or ffuf, depending on how misconfigured their DNS is.

Like
Reply
Andrew Lobenstein

Cybersecurity Analyst and Penetration Tester | OSWP • Pentest+ • CySA+

1d

dnsenum

Like
Reply
2 Reactions
Fariel B.

1d

No one tool wonder..I think combining Amass Subfinder and dnsx gives the best subdomain coverage

Like
Reply
Marjan Sterjev

IT Engineer | CISSP | CCSP | CEH (Master): research | learn | do | MENTOR

1d

Subfinder + massdns for entry confirmation.

Like
Reply
1 Reaction
Salm Bashemakh

Cyber Security | Cloud Computing | Web Development | THM 4% l eJPT

1d

Ffuf is the beast

Like
Reply
Farhad Gambarov

Passionate QA Professional | Expert in Software Testing | Continuous Learner | Quality Assurance Strategist | Automation Enthusiast | Defect Detective | Agile Testing Advocate"

1d

I think OWASP Amas

Like
Reply
Lorenzo Fornara

Consulente Informatico

10h

Nmap

Like
Reply
Julio N.

CTO

1d

subfinder -d example.com | sort -u | httpx > thesubs.txt

Like
Reply
1 Reaction
Jordan M.

Bug Bounty Hunter and a Cat😺 Dad.

1d

CTExposer for webapps that utilize CA/CT, no other tool compares. Subfinder and sublister will fail to find a great deal of respective subdomains.

Like
Reply
See more comments

To view or add a comment, sign in

Chuck Keith

455,582 followers

View Profile

Explore content categories