# the-art-of-subdomain-enumeration

**Repository Path**: mirrors_winneryong/the-art-of-subdomain-enumeration

## Basic Information

- **Project Name**: the-art-of-subdomain-enumeration
- **Description**: This repository contains all the supplement material for the book "The art of sub-domain enumeration"
- **Primary Language**: Unknown
- **License**: Not specified
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2020-09-26
- **Last Updated**: 2025-11-30

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

## The art of subdomain enumeration

- This repository contains all the supplement material for the book "The art of subdomain enumeration"
- The book is available here: https://appsecco.com/books/subdomain-enumeration/

1. `censys_subdomain_enum.py` - Extract subdomains for a given domain using Censys.io API
2. `cheatsheet.pdf` - cheat sheet for the subdomain enumeration techniques
3. `cloudflare_subdomain_enum.py` - A script to do DNS enumeration using Cloudflare service
4. `crtsh_enum_psql.py` - Extract subdomains for a given domain using crt.sh postgres interface(Python)
5. `crtsh_enum_psql.sh` - Extract subdomains for a given domain using crt.sh postgres interface(shell script)
6. `crtsh_enum_web.py` - Extract subdomains for a given domain using crt.sh by scraping the web page(Python3)
7. `san_subdomain_enum.py` - Extract domains/subdomains listed in Subject Alternate Name(SAN) of SSL/TLS cert for a domain
8. `virustotal_subdomain_enum.py` - Extract subdomains for a given domain using VirusTotal API

### Feedback/Suggestions

[@0xbharath](https://twitter.com/0xbharath)