DEV Community

Discussion on: How to Find Subdomains on a Website (And Why You Should)

Collapse
 
gtb3nw profile image
GTB3NW

You're doing it the hard way!

crt.sh with a wildcard to search for any issued certificates, then dnsdumpster for a free review of censys scans to get any domains mentioned in headers or self signed certs exposed to the internet.

Collapse
 
ctrlshifti profile image
Kat Maddox

Thanks for the tip! I'll look into that and update the post.