Task 1 Brief

What is a subdomain enumeration method beginning with B?

"Brute Force"

 

What is a subdomain enumeration method beginning with O?

"OSINT"

 

What is a subdomain enumeration method beginning with V?

"Virtual Host"

 

Task 2 OSINT – SSL/TLS Certificates

Go to crt.sh and search for the domain name tryhackme.com, find the entry that was logged at 2020-12-26 and enter the domain below to answer the question.

 

Task 3 OSINT – Search Engines

Go to Google and use the search term -site:www.tryhackme.com site:*.tryhackme.com, which should reveal a subdomain for tryhackme.com; use that subdomain to answer the question below.

 

Task 4 DNS Bruteforce

 

Task 5 OSINT – Sublist3r

What we need to do at this stage is to reach the answer using Sublist3r.

 

Task 6 Virtual Hosts

When we run the first command given to us and look at the subdomains, we notice something. Most of the results have a Size of 2395.

For this we need to filter these results.

Here is the code we need to use:

ffuf -w /usr/share/wordlists/SecLists/Discovery/DNS/namelist.txt -H "Host: FUZZ.acmeitsupport.thm" -u http://10.10.69.24 -fs {size}