DEV Community

Discussion on: How to Find Subdomains on a Website (And Why You Should)

Collapse
gtb3nw profile image
GTB3NW

You're doing it the hard way!

crt.sh with a wildcard to search for any issued certificates, then dnsdumpster for a free review of censys scans to get any domains mentioned in headers or self signed certs exposed to the internet.

Collapse
ctrlshifti profile image
Kat Maddox Author

Thanks for the tip! I'll look into that and update the post.