Tools & Defense Passive and Active Reconnaissance: Subdomain Enumeration with Amass and ffuf A practical walkthrough of passive and active recon: DNS footprinting, subdomain enumeration with Amass, and vhost/path fuzzing with ffuf. 2025.12.11 Tools & Defense