Basically, we want to identify as many endpoints as possible, sort and filter them, scan them automatically and perform manual assessments where applicable
We need to identify assets which belong to the target company and are in-scope. The first thing is to identify domains and sub-domains belonging to the target.
Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. …