Re:Web Application Penetration Testing Cheat Sheet
by 001spartan on Sunday April 01, 2018 @10:22PM
(#16731832)
I can't speak for DNSDumpster, but a common technique I use to do subdomain enumeration is just brute forcing with a wordlist. By enumerating with a large enough wordlist, you can discover matching subdomains for a target domain.
[ Parent
| on HN ]
Re:Web Application Penetration Testing Cheat Sheet
by sbarre on Monday April 02, 2018 @07:51AM
(#16733787)
Yeah this is a random string of characters so it can't be that.. Also my logs show it getting queried by automated tools within a few weeks of being live, so I suspect it's due to someone's else's suggestion that a DNS resolver somewhere is caching and sharing request data for "research" or other reasons.