Recon like a king for Bug Bounty

As we all know , If we want to hunt bugs , we have to get more and more information. With Recon we can:

  • Increase Target
  • Unpopular subdomains
1. Tool: SubBrute
usage: ./ > subdomain.txt
Now After having subdomains , I need to find further subdomains of subdomains
2. Tool: altdns
usage: -i subdomains.txt -o -w words.txt -s output.txt
Using above tool , you will get lot of subdomains
now we need to get all http status code for all subdomains
for that ;
go to
now you have to check for all the domains that are redirecting , as all those domains are really important 

Write a comment