Mandiant has released a new tool called tldfinder, which can be used to enumerate the top-level domains (TLDs) owned by a company. I found this to be particularly interesting because subdomain enumeration is a popular topic in the OSINT/Bug Bounty community, but TLD-based domain enumeration is not. Having a list of all the TLDs owned by a company can be very helpful in identifying potential targets for penetration testing. For example, if you are looking for vulnerabilities in a company's website, you may be able to find additional subdomains that you were not aware of by enumerating their TLDs. This could give you additional targets to test, which could lead to the discovery of more vulnerabilities. Overall, I believe that the release of tldfinder is a valuable addition to the OSINT/Bug Bounty community. It provides a new way to discover subdomains and related domains, which can be useful for a variety of purposes.
tldfinder: A New Tool for Enumerating Private TLDs
Google Cloud