Back to labs
offensive Web Beginner Free

Subdomain Triage With Subfinder

Practice passive subdomain discovery and triage.

Scenario

You need to identify likely staging and API hosts from passive data.

Objective

Find interesting subdomains and record the probable testing targets.

Target infrastructure

10.10.10.25

web-training-target

Example command format

subfinder -d apex-labs.test -silent

Beginners can use this as the first clue before entering the exercise.

Safety disclaimer

This is a simulated educational terminal. CyberCLI Web never executes your input, never runs Nmap, Hydra, SQLMap, Metasploit, or shell commands, and never connects to external targets.

Log in to start