> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.

# Subdomain Enumeration

> Cross-platform resources for Subdomain Enumeration: curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

# Subdomain Enumeration

This page aggregates **cross-platform resources to practice Subdomain Enumeration**: retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

## Curated resources

| Source     | Link                                                                                                                                                                                                                   |
| ---------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| HackTricks | [https://book.hacktricks.wiki/en/generic-methodologies-and-resources/external-recon-methodology/index.html](https://book.hacktricks.wiki/en/generic-methodologies-and-resources/external-recon-methodology/index.html) |

## HTB machines practicing Subdomain Enumeration (14)

| Machine                                                 | OS      | Difficulty                                           |
| ------------------------------------------------------- | ------- | ---------------------------------------------------- |
| [AdmirerToo](/en/htb/machines/linux/dificil/admirertoo) | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Bart](/en/htb/machines/windows/medio/bart)             | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Bolt](/en/htb/machines/linux/medio/bolt)               | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [CrossFit](/en/htb/machines/linux/insano/crossfit)      | Linux   | <span className="dbadge dbadge-insane">INSANE</span> |
| [Delivery](/en/htb/machines/linux/facil/delivery)       | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Hackback](/en/htb/machines/windows/insano/hackback)    | Windows | <span className="dbadge dbadge-insane">INSANE</span> |
| [Late](/en/htb/machines/linux/facil/late)               | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Meta](/en/htb/machines/linux/medio/meta)               | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Oouch](/en/htb/machines/linux/dificil/oouch)           | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [OverGraph](/en/htb/machines/linux/dificil/overgraph)   | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Player](/en/htb/machines/linux/dificil/player)         | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [RedCross](/en/htb/machines/linux/medio/redcross)       | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Stacked](/en/htb/machines/linux/insano/stacked)        | Linux   | <span className="dbadge dbadge-insane">INSANE</span> |
| [Undetected](/en/htb/machines/linux/medio/undetected)   | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |

## TryHackMe rooms practicing Subdomain Enumeration (2)

| Room                                     | Difficulty                                         | Type      | Access  | Official                                    |
| ---------------------------------------- | -------------------------------------------------- | --------- | ------- | ------------------------------------------- |
| [TakeOver](/en/tryhackme/rooms/takeover) | <span className="dbadge dbadge-easy">EASY</span>   | Challenge | 🟢 Free | [Open](https://tryhackme.com/room/takeover) |
| [Wekor](/en/tryhackme/rooms/wekorra)     | <span className="dbadge dbadge-easy">MEDIUM</span> | Challenge | 🟢 Free | [Open](https://tryhackme.com/room/wekorra)  |

***

← [Back to the full glossary](/en/glossary)

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"DefinedTerm","name":"Subdomain Enumeration","termCode":"subdomain-enum","inLanguage":"en","url":"https://rootea.es/en/skills/subdomain-enum","inDefinedTermSet":{"@type":"DefinedTermSet","name":"Tactical pentesting glossary","url":"https://rootea.es/en/glossary"}}`}
</script>

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"ItemList","name":"HTB machines practicing Subdomain Enumeration","numberOfItems":14,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://rootea.es/en/htb/machines/linux/dificil/admirertoo","name":"AdmirerToo"},{"@type":"ListItem","position":2,"url":"https://rootea.es/en/htb/machines/windows/medio/bart","name":"Bart"},{"@type":"ListItem","position":3,"url":"https://rootea.es/en/htb/machines/linux/medio/bolt","name":"Bolt"},{"@type":"ListItem","position":4,"url":"https://rootea.es/en/htb/machines/linux/insano/crossfit","name":"CrossFit"},{"@type":"ListItem","position":5,"url":"https://rootea.es/en/htb/machines/linux/facil/delivery","name":"Delivery"},{"@type":"ListItem","position":6,"url":"https://rootea.es/en/htb/machines/windows/insano/hackback","name":"Hackback"},{"@type":"ListItem","position":7,"url":"https://rootea.es/en/htb/machines/linux/facil/late","name":"Late"},{"@type":"ListItem","position":8,"url":"https://rootea.es/en/htb/machines/linux/medio/meta","name":"Meta"},{"@type":"ListItem","position":9,"url":"https://rootea.es/en/htb/machines/linux/dificil/oouch","name":"Oouch"},{"@type":"ListItem","position":10,"url":"https://rootea.es/en/htb/machines/linux/dificil/overgraph","name":"OverGraph"},{"@type":"ListItem","position":11,"url":"https://rootea.es/en/htb/machines/linux/dificil/player","name":"Player"},{"@type":"ListItem","position":12,"url":"https://rootea.es/en/htb/machines/linux/medio/redcross","name":"RedCross"},{"@type":"ListItem","position":13,"url":"https://rootea.es/en/htb/machines/linux/insano/stacked","name":"Stacked"},{"@type":"ListItem","position":14,"url":"https://rootea.es/en/htb/machines/linux/medio/undetected","name":"Undetected"}]}`}
</script>

*Last updated: 2026-05-09*