Timeline for How can I find subdomains of a site?
Current License: CC BY-SA 3.0
24 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 5 at 8:16 | comment | added | User2342342351 |
You can find subdomains that were issued through certificate transparency by using merklemap.com, which is a subdomain search engine that works by ingesting certificate transparency logs. For example, to search for Google subdomains, you could use this query: https://www.merklemap.com/search?query=*.google.com&page=1 This method can reveal subdomains that may not be discoverable through other techniques, as it relies on certificate issuance records rather than active scanning or crawling.
|
|
| Aug 24 at 11:44 | comment | added | d-b | I would like to answer Wayback Machine, because you can search for stackexchange.com/* but AFAIK you can't search for *.stackexchange.com there. If someone knows a way to do that, please comment! | |
| Apr 24, 2020 at 15:15 | history | edited | Luc |
edited tags
|
|
| Jan 8, 2019 at 13:54 | history | edited | Luc |
edited tags
|
|
| Nov 10, 2017 at 21:52 | answer | added | Stevoisiak | timeline score: 1 | |
| Jul 15, 2017 at 23:55 | answer | added | Luc | timeline score: 9 | |
| Jul 15, 2017 at 21:09 | answer | added | Dog eat cat world | timeline score: 0 | |
| Jul 15, 2017 at 16:53 | history | protected | CommunityBot | ||
| Apr 10, 2015 at 10:37 | answer | added | Lost_In_Library | timeline score: -1 | |
| Apr 9, 2015 at 18:59 | answer | added | atdre | timeline score: 3 | |
| Oct 13, 2014 at 8:11 | comment | added | F. Hauri - Give Up GitHub | You could even ask google! But this won't be a complete list! | |
| May 6, 2013 at 12:05 | vote | accept | NULLZ | ||
| May 4, 2013 at 19:59 | answer | added | rook | timeline score: 34 | |
| May 4, 2013 at 19:52 | history | edited | Adi |
edited tags
|
|
| Apr 30, 2013 at 11:05 | history | tweeted | twitter.com/#!/StackSecurity/status/329189875838496768 | ||
| Apr 30, 2013 at 7:57 | comment | added | TildalWave |
FYI it can be found on the edge-security.com website, but the old link posted on SecurityTube wiki page is dead (albeit it does have usage example which is of course defined in usage() anyway). Judging by source code, what it does is it collates data from three major search engines (yahoo, msn, google) and to me obscure website pgp.rediris.es that seems to be an email scrapper.
|
|
| Apr 30, 2013 at 7:53 | answer | added | void_in | timeline score: 0 | |
| Apr 30, 2013 at 7:38 | answer | added | Dr.Ü | timeline score: 3 | |
| Apr 30, 2013 at 7:38 | comment | added | AndyMac | There's a python script called subdomainer.py that should be able to help you out... Have a search on google | |
| Apr 30, 2013 at 7:19 | comment | added | Dr.Ü | I would try it with knock (code.google.com/p/knock) but watch out: there is a risk of being blacklisted. | |
| Apr 30, 2013 at 7:12 | comment | added | Dr.Ü | Then there is only one way - do it like maltego: make educated guesses... | |
| Apr 30, 2013 at 7:06 | history | edited | NULLZ | CC BY-SA 3.0 |
added 59 characters in body
|
| Apr 30, 2013 at 6:58 | comment | added | Dr.Ü | There is another post on stackoverflow that's quite good: [List of Subdomains][1] [1]: stackoverflow.com/questions/131989/… | |
| Apr 30, 2013 at 5:54 | history | asked | NULLZ | CC BY-SA 3.0 |