Unverified50% confidenceFactExact time
子域名发现的技术手段包括DNS字典爆破和证书透明度日志查询，常用工具有subfinder、amass和OneForAll
1
Sources
50%
Confidence
Long-term
Relevance
8/23/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedDNSLog is a vulnerability verification technique based on DNS query logs, primarily used to detect blind (no-response) type vulnerabilities.75% similarUnverifiedOneForAll 整合了DNS暴力枚举、搜索引擎语法、证书透明度日志查询、DNS域传送测试及Shodan、Censys、VirusTotal等威胁情报API的数据聚合74% similarUnverifiedDNS queries can encode arbitrary data in TXT records or subdomains, making them a covert communication channel—a technique that has long been documented in APT attacks.68% similarUnverifiedDNS over HTTPS (DoH) encapsulates DNS queries within encrypted HTTPS traffic, rendering traditional detection methods based on plaintext DNS traffic analysis ineffective.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/789963API
curl https://kongchang.com/api/v1/knowledge/claims/789963MCP
get_claim(id=789963)