Find Hidden Subdomains & URLs | Bug Bounty Recon

All my videos are for educational purposes with bug bounty hunters and penetration testers in mind YouTube don't take down my videos 😉

In this video I am going to show you the best tool for finding hidden subdomains and hidden urls and enumerating an attack surface

[bikramshiwakoti]

You are serving great quality content! I love the way how you love to spread your knowledge you have

[AnthonyMcqueen]

Yes this is what i learned rather than using a proxy this searches for more and find areas that have not been touched aka critical bugs.

[GOD-jqdt]

First of all thanks very much for this type of content .
I request to you to upload a course in which necessary Linux, networking and fundamental were covered .
This is my humble request to you
Thanks very much.

[gauravkumar]

Yes also to serve resolvers for more results

[bertrandfossung]

Thanks for sharing. I am currently struggling with recon . Please do well to share more videos like this. 🙏🏾🙏🏾🙏🏾

[chrisfx]

Thank you very much for this!!
Can you make a video on what endpoints are, and how to scan them for vulnerabilities please????🥺🥺

[mounirbennacer]

Great video 👌
Could you please make a video about the next step after recon ?
Recon is an important topic for sure, but we could easily fall into the recon trap and do nothing after it.

[AbdallahMahrous]

Thanks for the video.
it is realy helpful. please share more content about recon and bug bounty tips for beginner.

[shazzxr]

Hello Dear ! 💜✨

First of all thank you so much for the videos. I am learning Software Engineering and these videos are going to help me to better understand the security topics and also i am researching on the topics on my own and reading the docs from original sources.

But i want to ask something that incase in future whenever i will teach these topics to someone or share the information which i am learning from you do i will have to give any reference to your videos ?

Like you are helping us to better understand the original sources/docs and using the tools in a better way so do i will have to give any reference to your videos with original sources while sharing the info on yt or blogs etc!

Like as you know for being creative you have to seek knowledge, do lots of practice and find the solutions of problems!

and for knowledge i am learning from people like you as you have learned from your teachers, blogs and documentations :) and now you are sharing the information with your own style and creativity :)

and i also want to do the same. ✨💜

[ratmoneyg]

Sublist3r not working for me. The last line shown is "Virustotal probably now is blocking our requests" and then it skips out and bring me back to entering a command with no error explained. I tried updating sublist3r too and 20 minutes later, same problem...any ideas???

Amass works great though!

[lostInSocialMedia.]

Hello sir,
The video was amazing 🤩
I have a question, consider i have done passive sub domain enumeration and now i have 50000 subdomain. Now how to identify the which one is dead and which one is not dead. ?

[FlameHaze]

Thanks for this amazing content! More recon videos would be great

[KaRaOgLaNFirat]

Hello, and how to find the real ip addresses or subdomains hidden behind cloudflarenet?

[goodboy]

Instead of open list we do have aquatine and eyewitness tools that can do far better

[sbwmxmp]

hi thank you, where is the reconcours plz. thank you.

[Booboo]

amass enum -passive -d (domain name) is not returning anythign, what am I doin wrong

[acronproject]

so usefull thanks

💯💯💯💯💯💯💯💯💯💯💯💯💯💯💯💯💯💯

[AliYar-Khan]

amass is now giving different output or I am doing something wrong

[behradrezai]

if you are not using this anymore, then what are youo using?

[landless-wind]

How would you do it if the site is under some kind of cloud ?
Like aws ?