[linux]Enumerating subdomain

A server has a dns service and its ip address is 10.10.10.13, so I use nslookup and change the server to 10.10.10.13, and find out what is its fqdn. It is revealed that its fqdn is ns1.cronos.htb, so I am guessing the domain name would be cronos.htb too. To find out its sub domains in … Continue reading [linux]Enumerating subdomain