Attack Identification/Signature

aboul3la / Sublist3r

Fast subdomains enumeration tool for penetration testers

GNU General Public License v2.0

9.67k stars 2.09k forks source link

Attack Identification/Signature #133

Open dufywihi opened 6 years ago

dufywihi commented 6 years ago

Does Sublist3r at any point make queries against the target server? Would a sysadmin have any way of knowing or identifying that an adversary was using Sublist3r against their website/domain?

ad-m commented 6 years ago

If someone controls and registers DNS requests, for example, uses CloudFlare services, he can learn about it.