Results for “subdomain-discovery”

Enumerate DNS records, attempt zone transfers, brute-force subdomains, and map DNS infrastructure during authorized reconnaissance to identify attack surface, misconfigurations, and information disclosure in target domains.

Conduct domain and industry research. Use when the user says wants to do domain research for a topic or industry

Research the open web for enhancement opportunities (Layer 3 — Opus subagent with WebSearch + WebFetch). Topic-driven. Returns structured findings with hype tags + source URLs. Does NOT auto-implement.

Conduct passive OSINT reconnaissance on target organizations using a MITRE ATT&CK framework. Discovers employees, email patterns, subdomains, infrastructure, leaked credentials, and cloud assets with confidence-scored findings.

Finding and expanding keyword opportunities for free — mining Search Console queries for high-impression/low-position pages, expanding via Google Autocomplete, and snapshotting SERPs with web search; optional paid DataForSEO volume/difficulty data.