dnsmap

Passive DNS network mapper for subdomain enumeration

brewmacoslinux
Try with needOr install directly
Source

About

Passive DNS network mapper (a.k.a. subdomains bruteforcer)

Commands

dnsmap

Examples

Enumerate subdomains for a target domain$ dnsmap example.com
Brute force subdomains with a custom wordlist$ dnsmap example.com -w /path/to/wordlist.txt
Save results to a file$ dnsmap example.com -o results.txt