Sublist3r
Installation
Usage
Flags
Examples
Enumerate subdomains of specific domain
sublist3r -d example.com
Show only subdomains which have ports 80 and 443 open
sublist3r -d example.com -p 80,443
Save results in txt file
sublist3r -d example.com -o ~/output/file.txt
Also see