lazyrecon: This is an assembled collection of tools for performing recon.

目的:

找到旁路攻击目标;

找到真实IP,绕过WAF;

已经进入到内网,找出更多目标;

方法:

子域名爆破

https://www.nmmapper.com/sys/tools/subdomainfinder/

端口扫描

深入了解子域名挖掘tricks https://xz.aliyun.com/t/6617