One of the areas that I love when it comes to red/purple engagements is profiling organizations on LinkedIn and GitHub, looking for crucial information that can lead to more juicy enumeration.
As this series is a three part and dives into how to get domain admin in a
windows estate using different techniques I found it useful to link them
altogether in one flowing
I have been using Lepus for a number of years as it is one of the better
subdomain enumeration tools. I integrated some of the lessons learned from DNS
Queue [https://github.com/