The Bug Hunter's Methodology

[ MANUAL ]

find root domain - 00:01:40
find sub-domains - 00:01:40
find acquisition domains - 00:05:40
find autonomous system numbers (ASNs) - 00:08:22
ASN enumeration - 00:16:00
reverse WHOIS - 00:16:54
AD/analytics relationships - 00:20:06
legal - 00:24:24
SHODAN - 00:26:58

[ AUTOMATION ]
sub-domain enumeration - 00:27:57
sub-domain scrapping - 00:40:12
questions/benchmarks - 01:08:32
sub-domain brute-force - 01:15:46
port analysis - 01:19:43
screenshots - 01:26:54
sub-domain takeover - 01:34:42
extending tools - 01:39:21
frameworks - 01:43:47