Welcome back, my friend.
This is watching you and you are watching this session on discovering subdomains, you can ask why and
why.
To discover why, to discover subdomains.
Well, we are still in the information gathering stage, so we have to get as much as information as
possible that would help us to get the idea about the target or that could make our our way to hack
the target easier.
So let me give you an idea of organization, start ups, many companies before making their first application,
first product, maybe a Web application, let's say.
Let's take an example of an e-commerce site, OK?
A company decided to launch an e-commerce platform for selling shoes very so far forward, launching
any product, any platform.
The first version, which is the beta version, beta version is like the it's like the it's a walking
platform, but it doesn't carry all the required all the all the advanced features.
It has the required things to do well and customer can buy customer can buy the product can take out
and can get the delivery as well, product delivery as well.
But it won't be having those finishing touch and security related stuff covered as well.
So in those situations, those beaten site would become very, very helpful.
Now, what I'm really referring to what happened is the developers, the organization or any developers
of those company or even third party as well, they make a subdomain of the actual site, let's say
buy shoes, buy shoes.
Now, dot com, maybe.
OK, now this will be having a beta site that would be hosted on the subdomain, lets it be done by
shoes now dot com.
And this is where the beta or the test site will be hosted and the regular site will be published on
these main main domain itself.
Right.
So most of the time the French side would be the main domain would be very difficult to hack because
that would be covered with a lot of security stuff.
But the testing or the the another other testimonial would be easier to crack and easier to hack as
well.
And in fact, organization keep keep their one copy of application or another another sample site or
many other applications as well on the multiple subdomain that could be their vendors, that could be
for development, for testing many stuff.
Right.
And somehow if we get the access to that domain is that subdomain, we might give the access to the
customer information as well.
Right.
So let's let's understand one thing.
When you understand subdomain from the business point of view, it could be anything, maybe by dot
example, dot com to a customer can have that general site where we don't have a login page or something.
But when you want to buy something, you this this site will be redirected to Bidart.
Example, dot com.
It could be a retail dot example, dot com, it could be stored, for example, documents.
But this is valid for a site.
People who are not just into e-commerce, they make use of subdomain for their e-commerce.
Right.
So that if somebody is interested to buy a product, they can go to the subdomain, they would be redirected
to the subdomain.
And people who are interested for any services that can log in to the example dot com right from the
developer site, there are multiple use cases of it.
It could be stage one, dot example, dot com stage one could be retests each step the way I told you.
Right.
So stage one could be related to the initial phase of this application, the MVP of the product, maybe
this DOT example or comments about.
Right.
And then pre dot example.
These are just the possible example.
I'm not saying this is what the organization would be having, but is that a way to know what could
what could be the subdomain for any site?
Well, again, the same method, right?
This is all, I guess, mechanism.
And this all could be done with the same method for straight of a lovely method.
But can we use the best, you know, because the buster is all for the.
Acting the director for this will be making use of my many of the tools.
There are many tools which are publicly available for free.
There are many tools which are people with Gallie as well, would be making use of those for the same
purpose.
All right.
So in the next station, we'll make use of some very advanced tools for scanning a site to discover
the subdomains.
All right.
So we'll see you there.
Thank you.