5 ways subdomain enumeration breaks (and how to handle each)

Every subdomain enumeration tool looks fine until you actually run it on 50 domains. Here are the five places production tools quietly fail — and what to do about each.