findomain

Cross-platform tool for discovering subdomains through passive sources

brewmacoslinux
Try with needOr install directly
Source

About

Cross-platform subdomain enumerator

Commands

findomain

Examples

Enumerate subdomains for a target domain$ findomain -t example.com
Save results to a file$ findomain -t example.com -o results.txt
Use specific data sources for enumeration$ findomain -t example.com --sources all