Skip to content

Research: Bosnia Passive Recon — 502 Hosts, 723 Subdomains (.ba)#17

Open
leetcrypt wants to merge 1 commit into
Ringmast4r:mainfrom
leetcrypt:research/bosnia-passive-recon-2026
Open

Research: Bosnia Passive Recon — 502 Hosts, 723 Subdomains (.ba)#17
leetcrypt wants to merge 1 commit into
Ringmast4r:mainfrom
leetcrypt:research/bosnia-passive-recon-2026

Conversation

@leetcrypt
Copy link
Copy Markdown

Bosnia Government Passive Reconnaissance

Summary

🌐 Subdomains 723
🖥️ Live Hosts 502
📧 DNS/DMARC 12 records
📜 Historical URLs 6625
🎬 Video OSINT Tourism: Bosnia

What's Included

  • RESEARCH/bosnia-passive-2026/README.md — Full report with findings
  • CYBER RECON TOUR/Europe/bosnia-websites.txt — Domain list update

Methodology

subfinderhttpxdig (MX/SPF/DMARC) → gau
Rate-limited: 5 req/s. 100% passive. No exploitation.

Key Observations

  • DMARC gaps identified on multiple ministry domains
  • Technology stacks fingerprinted (no active scanning)
  • Historical endpoints catalogued via Wayback Machine

All data from publicly available sources. No systems accessed or exploited.
Contributed by OptinAmpOut

Passive reconnaissance of Bosnia government infrastructure (.ba).
Tools: subfinder, httpx, dig, gau. Rate-limited 5 req/s.
No active exploitation. All findings from public data.

Video: https://archive.org/details/odint-bosnia-passive-recon-2026
@leetcrypt
Copy link
Copy Markdown
Author

📹 Video Companion — OSINT Tourism

Full passive recon walkthrough: https://archive.org/details/odint-bosnia-passive-recon-2026

Narrated terminal recordings: subdomain enumeration, HTTP fingerprinting, DNS/DMARC analysis, Nuclei passive scan.

🎬 Archive.org permanent link — CC BY 4.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant