-
In websites like github.com. We can have *github.com subdomains which are valid. We have to detect this.
Probably by querying,
### what-the-heck-this-is-not-a-valid-domain.github.com
-
But we should first configure SPF and whatever else to avoid tons of noise.
![screen shot 2016-02-18 at 3 08 50 pm](https://cloud.githubusercontent.com/assets/134455/13156674/a5a0dbf6-d651-11e5-8a72-…
-
To search subdomains , get cert status, auto check in local, and so on.
-
Example:
bluto -D xyz.com -W /tmp/wordlist.txt -R /tmp/results.txt