Using Passive DNS sources for Reconnaissance and Enumeration, (Fri, Apr 29th)

In so many penetration tests or assessments, the client gives you a set of subnets and says “go for it”. This all seems reasonable, until you realize that if you have a website, there might be dozens or hundreds of websites hosted there, each only accessible by their DNS name.
http://news.poseidon-us.com/SPRd3n