How to do Subdomain Enumeration
There are three different subdomain enumeration methods: Brute Force, OSINT (Open-Source Intelligence) and Virtual Host. Subdomain Enumeration OSINT SSL/TLS Certificates Find sub domains by searching the certificate transparency logs: http://crt.sh/ https://transparencyreport.google.com/https/certificates Google Dorks DNS Brute Force DNSRecon dnsrecon Sublist3r sublist3r Virtual Hosts FFuF