Subdomain Enumeration - security

sublist3r

https://github.com/aboul3la/Sublist3r
./sublist3r.py -d acmeitsupport.thm
        

ffuf

# run without the -fs flag at first then get size of most common to enter into {size}
ffuf -w /usr/share/wordlists/SecLists/Discovery/DNS/namelist.txt -H "Host: FUZZ.acmeitsupport.thm" -u http://10.10.68.86

# add the common size into {size} in the below command to filter those out
ffuf -w /usr/share/wordlists/SecLists/Discovery/DNS/namelist.txt -H "Host: FUZZ.acmeitsupport.thm" -u http://10.10.68.86 -fs {size}