subfinder

Discovers valid subdomains for websites, designed as a passive framework to be useful for bug bounties and safe for penetration testing

Category
OSINT and Reconnaissance
Website
https://projectdiscovery.io/open-source
Source code
https://github.com/projectdiscovery/subfinder
Price
Free