Home › Forums › Bug Bounty Q&A › How to find if sub is wildcard?
Tagged: recon
- This topic has 6 replies, 3 voices, and was last updated 8 months, 4 weeks ago by
caon.
-
AuthorPosts
-
JDRanpariyaParticipant
After running bunch of tools I’ve list of subdomains. Now I want to do the recursion(like for each sub again subfinder, findomain etc). So my question is it worth recursing for every subdomain without knowing if it’s wildcard or not?
May 2, 2022 at 5:36 am #5246JDRanpariyaParticipantThanks I think that will do as I already use puredns for resolving part. I went through Wikipedia and seems like worth it. I don’t know when but whole dns thing is so broad that reading rfc feels necessary.
I was using puredns but didn’t knew it will handle the wildcards by itself.
May 5, 2022 at 5:26 am #5252caonParticipantIf you are going to use puredns get a nice list of resolvers, you can find them here:
https://github.com/felipecaon/resolvers
It is a list of already known and resolvered IPs but with re-checking steps, I’ve found out that rechecking makes them less noisy because a lot of DNSes are configured to cloak results.
-
This reply was modified 8 months, 4 weeks ago by
caon.
May 5, 2022 at 12:15 pm #5260 -
This reply was modified 8 months, 4 weeks ago by
-
AuthorPosts
- You must be logged in to reply to this topic.