Is Subdomain Bruteforcing Worth It?!

Purchase my Bug Bounty Course here 👉🏼 bugbounty.nahamsec.training

Buy Me Coffee:
https://www.buymeacoffee.com/nahamsec

Wordlists:
https://github.com/danielmiessler/SecLists/
http://wordlist.assetnote.io/

Tools:
- dnsvalidator: https://github.com/vortexau/dnsvalidator
- shuffledns: https://github.com/projectdiscovery/shuffledns

Live Every Sunday on Twitch:
https://twitch.tv/nahamsec

Free $100 DigitalOcean Credit:
https://m.do.co/c/3236319b9d0b

Follow me on social media:
https://twitter.com/nahamsec
https://instagram.com/nahamsec
https://twitch.com/nahamsec
https://hackerone.com/nahamsec
https://facebook.com/nahamsec1

Nahamsec's Discord:
https://discordapp.com/invite/ucCz7uh

00:00 - Intro
1:26 - How does a wordlist work
1:55 - Resolvers
3:19 - Setting up tools (quick guide)
3:49 - dnsvalidator demo
4:26 - Meme (LOL!)
5:02 - shuffledns demo
5:45 - …

bounty bruteforcing bug bug bounty bugbounty coffee course credit demo digitalocean discord free guide hackerone hackers hacking infosec live media meme offensivesecurity redteam social social media subdomain tools training twitch wordlist wordlists work