subbrute
subbrute (3.2k β, 2017 πͺ¦) is a tool that may be used to enumerate DNS information of a domain.
To brute force subdomains:
$ git clone https://github.com/TheRook/subbrute.git
$ cd subbrute
$ echo "ns1.xxx.yyy" > resolvers.txt
$ ./subbrute.py xxx.yyy -s wordlist.txt -r resolvers.txt -v
β οΈ You must add the domain + each resolver in your host file.