3 ms·
I'd imagine it's a combination of - CT log monitoring (https://github.com/CaliDog/CertStream-Server https://github.com/CaliDog/CertStream-Server) - Mass-Scann
by yup_sto 2y ago
I'd imagine it's a combination of
- CT log monitoring (https://github.com/CaliDog/CertStream-Server https://github.com/CaliDog/CertStream-Server)
- Mass-Scanning across ipv4 on 80/443 at the least?
- Brute-forcing subdomains on wildcards with large DNS wordlist (like something from assetnote: https://wordlists-cdn.assetnote.io/data/manual/best-dns-wordlist.txt https://wordlists-cdn.assetnote.io/data/manual/best-dns-word...)
- Scraping/extracting subdomains/domains from JS
But I've never attempted to enumerate subdomains on this scale before, so I could be missing something obvious