Hello, everyone, and welcome to this video.
So in this video, we are going to see one of the interesting features of a sub finders, which is going
to help us a lot in identification of many of the sub subdomains or vertical correlation domains or
the hidden subdomains.
Now, this feature is called as the Recursive Enumerations SubDomains feature, which is given into
the sub finder tool.
And let's quickly see the example of this.
So let's say I was able to identify one of the subdomain for a target program, uber dot com.
So the subdomain that I have identified is dev dot uber dot com.
Now if I'm going to use sub finder on dev.uber.com and I'm going to do a recursive enumeration
or analysis of subdomains.
Let's see if I'm able to identify multiple sub subdomains here or no.
As you can see over here, I am able to identify in total 128 recursive subdomains of dev.uber.com.
Now this gives you a variety of assets which may be missed by other security researchers, wherein
you have done the recursive enumeration and you are getting a lot of subdomains over here.
Now you can simply identify if any of the subdomain, if it is running a sensitive panel that can be
bypassed easily, or if there is any sensitive information that has been exposed by mistake or any software
version or cms that is running outdated software, which has a publicly available exploit.
Also, apart from the recursive analysis, there is a feature of hyphen t, which is basically the
concurrent threads that you can give to sub finder.
Now this increases the efficiency of your scan and gives you multiple threads to run on your multiple
target domains, which basically makes the scans much more faster.
Even if you want to hide these Banner, which is coming into your scans when you're saving this output.
You can also do that using the silent feature.
So when you run the silent feature or the flag, you will not be able to see the banner of sub Finder
and only get a clean version of the output, as you can see over here.
So these were some of the features that you may find to be very, very helpful while you are doing subdomain
enumeration using sub finder.
So I hope you guys understood.
Thank you.