sublist3r

Subdomain enumeration via search engines + brute force (Kali / pip). Authorized targets only.

$ sublist3r -d example.com
$ sublist3r -d example.com -b -t 50 -o subs.txt