Virtual Host Enumeration
Virtual host enumeration is an important technique for discovering subdomains or virtual hosts hosted on the same IP address. One way to perform this is using FFUF (Fuzz Faster U Fool), a tool for web fuzzing.
FFUF Command for Virtual Host Enumeration
The following FFUF command can be used to enumerate virtual hosts by fuzzing DNS subdomains:
ffuf -c -u 'http://<target ip>' -H 'Host: FUZZ.example.com' -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -mc all