Subfinder

Purpose

Use this skill for quick passive subdomain enumeration early in external discovery.

Phase Fit

• Primary: Discovery and Reconnaissance
• Secondary: Threat Modeling and Test Planning
• Retest use: verify whether deprecated subdomains were removed from exposure

Use When

• Need a fast passive view of likely subdomains.
• Need a seed list for HTTP probing or deeper inventory validation.
• Need to cross-check public exposure against expected holdings.

Avoid When