sub-domain enumeration techniques

This repository contains all the talk materials, videos and scripts from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference.

* cheatsheet.pdf - cheat sheet on the sub-domain enumeration techniques covered in the talk
* cloudflare_enum.py - A script to do DNS enumeration using Cloudflare service
* crt_psql.sh - Extract sub-domains for a given domain using crt.sh postgres interface
* esoteric_subdomain_enumeration_techniques.pdf - Slides from the talk
* subdomain_enum_censys.py - Extract sub-domains for a given domain using Censys.io API
* subdomain_enum_crtsh.py - Extract sub-domains for a given domain using crt.sh RSS feed
* subdomain_wordlist.txt - A collection of sub-domain names(around 3 million)