Hello, everyone, and welcome to this video.
So in this video, we are going to understand the importance of subdomains in our reconnaissance or
increasing the scope of our asset into any bug bounty program.
So the first question, why subdomains?
Because subdomains are the high value target, which will increase our success rate whenever we are
performing bug bounty or penetration testing.
So now we are going to consider the target as evil corp dot com to take further, more examples.
So enumerating the scope of a program which is evil corp dot com from now is very, very important
for us.
why, because we are going to increase the scope.
The chances are that your success rate is going to increase because there are high chances that many
of the subdomains must not be tested by other security researchers or not even properly protected by
the developers of that particular organization.
There have been many examples in which there are critical findings on subdomains through which the security
researcher is able to get access to the main domain as well.
There have been chances wherein developers have deployed outdated software versions or content management
systems on subdomains, and there are publicly available exploit for those targeted softwares.
Now it becomes very, very easy to identify these types of low hanging subdomains to easily target them
and get a reward.
That way, you should always start with identification of subdomains that can be hidden over there and
be vulnerable.
Now, what exactly is a subdomain that we are talking about?
If you see into this figure over here as our target is evil corp dot com, it is known as the top level
domain for any bug bounty program or any organization.
No beta dot evil corp dot com is the subdomain.
Remember, each and every subdomain start before the top level domain and start before the dot, as
you can see over here.
Now, alpha.beta.evilcorp.com is also called the sub sub domain or also known as vertical
co-relation.
This basically is an example of multiple subdomains under the top level domain.
And yes, there have been many, many examples of many bug bounty programs wherein there are multiple
sub subdomains which are hidden and which are vulnerable to multiple vulnerabilities.
So, yes, identification of subdomain and sub subdomain is very, very important.
And in the upcoming videos, we're going to see that.
How can you identify the subdomains or the hidden sub subdomains, which are not known by other security
researchers, and you can easily identify issues of flaws into them.
So I hope you guys understood the importance of subdomains and what is a subdomain.
Thank you.