Subdomain Enumeration

Cross-platform resources for Subdomain Enumeration: curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

This page aggregates cross-platform resources to practice Subdomain Enumeration: retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

Coverage: 16 challenges across 2 platforms — 14 HackTheBox · 2 TryHackMe. 14 with a Spanish writeup, 14 with a video writeup.

Where to start

Ordered by actual difficulty. At the same level: isolated lab first, then the guided room, and the full machine last.

1. TryHackMe — TakeOver (Easy · ~4 min) · 🇬🇧
2. HackTheBox — Delivery (Fácil) · 🇪🇸 🇬🇧 📹
3. HackTheBox — Late (Fácil) · 🇪🇸 🇬🇧 📹
4. TryHackMe — Wekor (Medium · ~75 min) · 🇬🇧
5. HackTheBox — Bart (Medio) · 🇪🇸 🇬🇧 📹
6. HackTheBox — Bolt (Medio) · 🇪🇸 🇬🇧 📹

Curated resources

Source	Link
HackTricks	https://book.hacktricks.wiki/en/generic-methodologies-and-resources/external-recon-methodology/index.html

HTB machines practicing Subdomain Enumeration (14)

Machine	OS	Difficulty	Writeup
AdmirerToo	Linux	HARD	🇪🇸 🇬🇧 📹
Bart	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Bolt	Linux	MEDIUM	🇪🇸 🇬🇧 📹
CrossFit	Linux	INSANE	🇪🇸 🇬🇧 📹
Delivery	Linux	EASY	🇪🇸 🇬🇧 📹
Hackback	Windows	INSANE	🇪🇸 🇬🇧 📹
Late	Linux	EASY	🇪🇸 🇬🇧 📹
Meta	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Oouch	Linux	HARD	🇪🇸 🇬🇧 📹
OverGraph	Linux	HARD	🇪🇸 🇬🇧 📹
Player	Linux	HARD	🇪🇸 🇬🇧 📹
RedCross	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Stacked	Linux	INSANE	🇪🇸 🇬🇧 📹
Undetected	Linux	MEDIUM	🇪🇸 🇬🇧 📹

TryHackMe rooms practicing Subdomain Enumeration (2)

Room	Difficulty	Type	Access	Official
TakeOver	EASY	Challenge	🟢 Free	Open
Wekor	MEDIUM	Challenge	🟢 Free	Open

---

← Back to the full glossary

Last updated: 2026-08-13