Active Subdomain Enumeration

Recurso/Comando	Descrição
HackerTarget	https://hackertarget.com/zone-transfer/
SecLists	https://github.com/danielmiessler/SecLists
gobuster dns -q -r "${NS}" -d "${TARGET}" -w "${WORDLIST}" -p ./patterns.txt -o "gobuster_${TARGET}.txt"	Força bruta de subdominios.

Força bruta de subdominios com o dnsenum

dnsenum example.com -f subdomains.txt