Learn Ethical Hacking from Scratch

Finding subdomains

In this section we're going to study subdomains. We see subdomains everywhere, for example, subdomain.target.com. Now, if we have beta.facebook.com, we would have mobile.facebook.com, or we might have user.facebook.com. Suppose we google mail.google.com, which just takes us to Gmail. Why subdomains are important is, in a lot of cases, websites have subdomains for their own users, for example, for employees or for certain customers, so they're not advertised unless it's some sort of a VIP customer or we are an employee. We will not see these subdomains on search engines and we will never see a link leading to them, so they might contain vulnerabilities or exploits that will help us gain access to the whole website, but we ...