What’s the Active Enumeration Technique to find the answer for this question?:
Perform active subdomain enumeration against the target githubapp.com. Which subdomain has the word ‘elephants’ in the name?
I found the answer using Passive technique: Information gathering - web edition
But I want to know the proper Active Technique for this?
or is it just purely brute-forcing? and not from DNS enumeration?
I tried active tools to get the correct answer but I failed.
Anyone got a writeup?