Skip to main content

All Questions

Filter by
Sorted by
Tagged with
0 votes
1 answer
632 views

DNS Enumeration by IP Address

I know all baseline steps to do DNS enumeration over a domain. But my questions is: how can I enumerate a server when I do not know which domain it is managing and I only have its IP address? My ...
Mr John's user avatar
  • 11
0 votes
0 answers
246 views

How does the Amass intel module correlate information?

Can someone explain to me how OWASP Amass correlates information regarding the intel module domain search? As an example, if I run the command: amass intel -d example.com -whois I'll get a list of ...
Bruno Alexandre Moreira Pincho's user avatar
2 votes
1 answer
3k views

import list of domains into recon-ng

Is there a way to add domains into recon-ng from a text file (newline delimited)? I've tried comma delimiting entries but reco-ng takes the comma as part of the domain. At the moment I am doing: for ...
user1330734's user avatar
50 votes
8 answers
65k views

How can I find subdomains of a site?

One of the things I need to do from time to time is to find subdomains of a site for example. Starting with example.com sub1.example.com other.example.com another.example.com I'm ...
NULLZ's user avatar
  • 11.5k