💻
Portfolio
  • Introduction
  • License
  • Configurations
    • Homelab
    • GitBook to Docusaurus Migration
    • Mobile
    • Digital Books
    • Virtual Machines
  • Privacy and Security
    • Basic Software Investigation
    • Application Sandboxing
    • AppArmor
  • Information Technology
    • Backups
  • OSINT
    • Breach Data
      • Leveraging Breach Data
      • Breach Data Indexing
      • Breach Data Infrastructure
      • Stealer Logs
      • Miniature Breach Index
      • Containerization
    • Transportation
      • United Kingdom Vehicle Registration Search
  • Penetration Testing
    • Wireless
      • Raspberry Pi Portable Hacking Station
      • Wi-Fi
        • Pwnagotchi
        • Aircrack
    • Physical
      • Lockpicking
        • Master Lock 140D
        • Master Lock 1
      • Rubber Ducky
        • Digispark ATtiny85 Rubber Ducky
          • Windows
            • Keylogger
          • MacOS Scripts
            • Warning
            • Wi-Fi Name
            • Website Pop-up
    • Hash Cracking for Dummies
    • Advanced Hash Cracking
  • Write-ups
    • TryHackMe
      • The Marketplace
      • Game Zone
      • VulnNet: Internal
      • RootMe
      • Skynet
      • VulnNet: Roasted
      • Blueprint
      • Anthem
      • Relevant
      • Ice
      • Lian Yu
      • c4ptur3-th3-fl4g
      • CTF collection Vol.1
      • Wgel CTF
      • Anonymous
      • Startup
      • tomghost
      • Overpass 3 - Hosting
      • Agent Sudo
      • Walking An Application
      • Content Discovery
      • Subdomain Enumeration
      • Authentication Bypass
      • Pickle Rick
      • Wonderland
      • Reversing ELF
    • picoCTF
      • PicoCTF 2021
        • Obedient Cat
        • Stonks
        • Wave a flag
        • GET aHEAD
        • Mind your Ps and Qs
        • information
        • Nice netcat...
        • Transformation
        • Python Wrangling
        • Mod 26
      • PicoCTF 2023
        • babygame01
        • chrono
        • findme
        • hideme
        • HideToSee
        • MatchTheRegex
        • money-ware
        • PcapPoisoning
        • Permissions
    • Hack The Box
      • Nunchucks
      • Return
      • Antique
      • Lame
      • Validation
      • Shocker
      • Bashed
      • Nibbles
      • Beep
      • Cronos
      • Sense
      • SolidState
      • Node
      • Valentine
      • Sunday
      • TartarSauce
      • Legacy
      • Blue
      • Devel
      • Nineveh
    • Pwnable.kr
      • [fd]
      • collision
      • bof
      • flag
      • passcode (incomplete)
      • random
    • Microcorruption
      • New Orleans
      • Sydney
      • Hanoi
      • Cusco
    • Kase Scenarios
      • Dark Waters
      • Betrayal
    • Hacktoria
      • Last Flight
      • The Hunt for LOLbins
      • Mediterranean Mafia
    • SEINT_pl OSINT Quiz
      • 2022
      • 2023
  • Other Projects
    • Recipes
      • Beef Birria Tacos
      • IHOP Mango Lemonade Splasher
      • Brownie & Ice Cream
      • Peri Peri Seasoning
      • Chicken Wings
      • Pizza Bagels
Powered by GitBook
On this page
  • Task 1: Brief
  • Task 2: OSINT - SSL/TLS Certificates
  • Task 3: OSINT - Search Engines
  • Task 4: DNS Bruteforce
  • Task 5: OSINT - Sublist3r
  • Task 6: Virtual Hosts
  1. Write-ups
  2. TryHackMe

Subdomain Enumeration

Last updated 2 years ago

Task 1: Brief

The answers to the questions in this task, were all in the written portion:

Task 2: OSINT - SSL/TLS Certificates

I then ran a Control-F for the date they mentioned, and found this:

This was the answer to the question.

Task 3: OSINT - Search Engines

If you type "-site:www.tryhackme.com site:*.tryhackme.com" on Google.com, then you will find this:

This is the answer for the question.

Task 4: DNS Bruteforce

For this question, THM provides a link to View Site, which leads to a panel:

The answer was in the output.

Task 5: OSINT - Sublist3r

Similar panel to the previous question:

The answer was in the output as well.

Task 6: Virtual Hosts

I ran the command ffuf -w namelist.txt -H "Host: FUZZ.acmeitsupport.thm" -u http://10.10.110.177 -fs 2395 and I got the solution eventually (after 13 minutes):

I went to , and searched for "tryhackme.com". This got me a list:

https://crt.sh