In this tutorial, We will learn how to find subdomains of any website. It also helps to brute force website as well as it has wordlist.
Linux OS or Linux environment
Knockpy
Subdomains finder mostly use by security analyst. It helps to prevent any subdomain takeover bug.
In this tutorial, We will be using a website to find subdomain and script features.
It shows all domain without saving and wordlist
knockpy domain.com
It shows all domain with wordlist
knockpy domain.com -w wordlist.txt
It shows response in header
knockpy -r domain.com
In this picture, I have target.com and I'm using Kali Linux. I am using simple command to use find subdomain.
