Blog

Reconnaissance

Finding what exists before deciding what to test, and knowing which of it is real.

1 post

1 Sept 2026
Passive vs active subdomain enumeration, and when each one lies
subfinder returns over six hundred names for tesla.com; well under half resolve. Passive and active subdomain enumeration fail in opposite directions.
Subdomain enumerationDNS