Ways to find out subdomains

There are a few different ways to find out subdomains of a specific site. None of them can guarantee that you will find all subdomains. So you will probably have to use several different tools.

Google Dorks
You can use google. With this type of search you will find some of the
site:*.example.com/ -site:www.example.com

Online tools


SubBrute is a python-program that bruteforces the subdomains. It can be quite useful.

Github repo


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s