https://github.com/Esc4iCEscEsc/skanuvaty
Start with a domain, and we'll find everything about it.
Features:
Outputs a handy .json file with all the data for further investigation.
Runs as fast as your computer/network/DNS resolver allows it to be. Test run for 10.000 subdomains tested all of them in ~20 seconds with concurrency set to 16 on a machine with 16 (logical) cores.
GitHub - Bandit-HaxUnit/haxunit
HaxUnit combines multiple active and passive subdomain enumeration tools and port scanning tools with vulnerability discovery tools.
For each subdomain enumeration tool you'll be prompted to add the new discovered subdomains to the list.If you see unrelated subdomains you can decline and you'll be asked again with only subdomains of the same domain as the input.