Amass

An open-source network mapping and attack surface discovery tool under OWASP. It supports subdomain enumeration, DNS resolution, and network topology discovery, and is commonly used during the information-gathering phase of penetration testing.