Subfinder

An open-source subdomain enumeration tool that uses passive information-gathering techniques to rapidly discover subdomain assets of a target. It is widely used during the reconnaissance phase of network security penetration testing and vulnerability research.