Automated Subdomain Enumeration

What problem does it solve?

This Skill addresses the challenge of discovering all subdomains for a target domain, enabling comprehensive attack surface mapping by combining passive data sources with active DNS enumeration. It helps identify forgotten or misconfigured assets that may present vulnerabilities and exposure.

Core Features & Use Cases

• Passive & Active Discovery: Integrates multiple sources to collect subdomains without and with direct target interaction.
• Validation & Prioritization: Filters live domains and categorizes findings to guide further assessment.
• Use Case: Build a complete inventory of an organization's subdomains (including development, staging, and shadow IT) to plan targeted assessments.

Quick Start

Use the automated_subdomain_enum.sh script with your target domain.