#1Subdomain discovery, DNS brute-force, certificate transparency, and asset enumeration tools.
Kitploit recommended

This script is intended to automate your reconnaissance process in an organized fashion
Inventus is a spider designed to find subdomains of a specific domain by crawling it and any subdomains it discovers.

Subdomain brute-forcing tool that enumerates existing subdomains and detects misconfigured cloud-hosted subdomains vulnerable to takeover across AWS,…

A modular distributed penetration testing tool.

Automated phishing campaign toolset that spawns dedicated AWS EC2 instances with integrated PhishingFrenzy and BeEF, plus subdomain discovery and…

Multithreaded Python tool for brute-forcing hidden directories and subdomains on target web servers to aid in reconnaissance and information…

Recon, Subdomain Bruting, Zone Transfers

CVE-2014-0160 mass test against subdomains