Passive DNS network mapper for subdomain enumeration
Passive DNS network mapper (a.k.a. subdomains bruteforcer)
dnsmap
$ dnsmap example.com
$ dnsmap example.com -w /path/to/wordlist.txt
$ dnsmap example.com -o results.txt