add initial recursive subdomain enumeration support

subfinder / research

❄️ Research project for SubFinder core API V2

MIT License

35 stars 8 forks source link

Closed picatz closed 5 years ago

picatz commented 5 years ago

This is a probably a crucial feature in order to be finally merged into the main master branch.

picatz commented 5 years ago

I'd also like some form of domain reduction which might help with recursive enumeration.

Given a successful domain enumerated from google.com, such as essbase-dev-db1.hot.corp.google.com:

Can maybe also enumerate the following:

*-dev-db1.hot.corp.google.com 
*-db1.hot.corp.google.com
*.hot.corp.google.com
*.corp.google.com

A simple little algorithm I think could be cooked up and added to the EnumerateSubdomains function.