At DEFCON 2023, the Recon Village hosted a subdomain‑enumeration challenge in which participants had 72 hours to discover as many valid subdomains as possible from 14,917 seed domains, with points awarded for valid FQDNs and deducted for invalid ones. A DomainTools‑affiliated team used DomainTools software to enrich enumeration by leveraging historical DNS data, WHOIS intelligence, and risk‑based signals to efficiently prioritize likely‑valid subdomains and filter out noise. This approach helped the team maximize their score while reducing false positives, and the report later outlines an alternative method that, when combined with DomainTools‑backed insights, can yield roughly two orders of magnitude more results than the original winning submission.

Join for free to read