How do I get a list of all subdomains of a domain? [closed]
The hint (using axfr) only works if the NS you’re querying (ns1.foo.example in your example) is configured to allow AXFR requests from the IP you’re using; this is unlikely, unless your IP is configured as a secondary for the domain in question. Basically, there’s no easy way to do it if you’re not allowed to … Read more