Subdomain & endpoint enumeration using passive reconnaissance tools

[0xgh64]

subfinder -d target.com > domains.txt
cat domains.txt | ./httpprobe > live-domains.txt
cat live-domains.txt | ./waybackurls > urls.txt
cat urls.txt | ./httpx --status-code-title > status.txt

Subfinder: https://github.com/projectdiscovery/subfinder
HTTProbe: https://github.com/tomnomnom/httprobe
Waybackurls: https://github.com/tomnomnom/waybackurls
HTTPX: https://github.com/projectdiscovery/httpx

-Greyhound