Scripting Exercise: sub-domains enumeration.
Offensive Security Certified Professional (OSCP) video series by Ahmed: