The art of subdomain enumeration

This repository contains all the supplement material for the book "The art of subdomain enumeration"
The book is available here: https://appsecco.com/books/subdomain-enumeration/

censys_subdomain_enum.py - Extract subdomains for a given domain using Censys.io API
cheatsheet.pdf - cheat sheet for the subdomain enumeration techniques
cloudflare_subdomain_enum.py - A script to do DNS enumeration using Cloudflare service
crtsh_enum_psql.py - Extract subdomains for a given domain using crt.sh postgres interface(Python)
crtsh_enum_psql.sh - Extract subdomains for a given domain using crt.sh postgres interface(shell script)
crtsh_enum_web.py - Extract subdomains for a given domain using crt.sh by scraping the web page(Python3)
san_subdomain_enum.py - Extract domains/subdomains listed in Subject Alternate Name(SAN) of SSL/TLS cert for a domain
virustotal_subdomain_enum.py - Extract subdomains for a given domain using VirusTotal API

Provide feedback