The DEF CON Recon Village Subdomain Enumeration Challenge: A Retrospective
A Key First Step in Attack Surface Assessment
At the 2023 DEF CON, the Recon Village ran the “ReconAacharya Subdomain Enumeration Challenge.” Subdomain enumeration is a terrific subject for a cybersecurity competition, since it is often a key first step in attack surface assessment. This report is a post-hoc discussion of the DomainTools-affiliated team’s submission to that challenge. In addition to describing our solution, we also describe an alternative approach that can yield two orders of magnitude more results than our team’s winning submission at DEF CON 2023.
