GitHub - appsecco/the-art-of-subdomain-enumeration: This repository contains all the supplement material for the book "The art of sub-domain enumeration"

The art of subdomain enumeration

This repository contains all the supplement material for the book "The art of subdomain enumeration"
The book is available here: https://appsecco.com/books/subdomain-enumeration/

censys_subdomain_enum.py - Extract subdomains for a given domain using Censys.io API
cheatsheet.pdf - cheat sheet for the subdomain enumeration techniques
cloudflare_subdomain_enum.py - A script to do DNS enumeration using Cloudflare service
crtsh_enum_psql.py - Extract subdomains for a given domain using crt.sh postgres interface(Python)
crtsh_enum_psql.sh - Extract subdomains for a given domain using crt.sh postgres interface(shell script)
crtsh_enum_web.py - Extract subdomains for a given domain using crt.sh by scraping the web page(Python3)
san_subdomain_enum.py - Extract domains/subdomains listed in Subject Alternate Name(SAN) of SSL/TLS cert for a domain
virustotal_subdomain_enum.py - Extract subdomains for a given domain using VirusTotal API

Name		Name	Last commit message	Last commit date
Pipfile		Pipfile
Pipfile.lock		Pipfile.lock
README.md		README.md
censys_subdomain_enum.py		censys_subdomain_enum.py
cheatsheet.pdf		cheatsheet.pdf
cloudflare_subdomain_enum.py		cloudflare_subdomain_enum.py
crtsh_enum_psql.py		crtsh_enum_psql.py
crtsh_enum_psql.sh		crtsh_enum_psql.sh
crtsh_enum_web.py		crtsh_enum_web.py
requirements.txt		requirements.txt
san_subdomain_enum.py		san_subdomain_enum.py
virustotal_subdomain_enum.py		virustotal_subdomain_enum.py