Cross-platform tool for discovering subdomains through passive sources
Cross-platform subdomain enumerator
findomain
$ findomain -t example.com
$ findomain -t example.com -o results.txt
$ findomain -t example.com --sources all