如何能列出一个主域名下面的二级域名呢？

[J0YSC]

比如我知道 www.v2ex.com
通过什么方法找出 workspace.v2ex.com/ livid.v2ex.com XXX.v2ex.com 等等
这样做主要是为了找出某些网站最新的beta产品（很可能没有入口提示）。

[ihacku]

哦 发现之前发重了 不过又发现几个
http://labs.portcullis.co.uk/tools/finding-all-the-vhosts/
https://github.com/TheRook/subbrute
https://github.com/tomsteele/blacksheepwall

[ihacku]

https://github.com/fooying/3102

[ihacku]

dnsenum
https://sqzr.cc/blog/2014/12/31/dnsenum-using-document/

[ihacku]

https://github.com/darkoperator/dnsrecon

[ihacku]

https://github.com/ring04h/wydomain

[ihacku]

https://github.com/manning23/Mscanner/tree/master/plugins/brutedomain

[ihacku]

https://github.com/RandomStorm/Bluto

[only25133]

@ihacku 真有毅力啊你~赞一个

[ihacku]

http://www.mottoin.com/96408.html

[ihacku]

http://www.freebuf.com/sectool/127400.html

[ihacku]

http://paper.seebug.org/113/

[ihacku]

https://github.com/Chora10/FuzzDomain

[ihacku]

https://github.com/chuhades/dnsbrute

[ihacku]

https://github.com/mschwager/fierce

[ihacku]

https://github.com/guelfoweb/knock

[ihacku]

https://github.com/nullsecuritynet/tools/tree/master/scanner/dnsspider

[ihacku]

https://github.com/blechschmidt/massdns

[ihacku]

https://findsubdomains.com

[ihacku]

https://github.com/caffix/amass/releases

[ihacku]

https://github.com/OJ/gobuster