http://webbreacher.blogspot.com/2013/08/dns-host-enumeration-tool-bake-off.html

• fierce2 – http://trac.assembla.com/fierce
• theharvester – https://code.google.com/p/theharvester/
• DNSRecon – https://github.com/darkoperator/dnsrecon
• blacksheepwall – https://github.com/tomsteele/blacksheepwall

subbrute    https://github.com/TheRook/subbrute

Fierce           http://ha.ckers.org/fierce/

dnsmap:            https://code.google.com/p/dnsmap/

dns-discovery    https://code.google.com/p/dns-discovery/

dnsenum           https://code.google.com/p/dnsenum/

                          https://github.com/fwaeytens/dnsenum

 

 

NameList:              https://github.com/darkoperator/dnsrecon/blob/master/namelist.txt

Online tool

 

http://www.wolframalpha.com/

 

https://pentest-tools.com/reconnaissance/find-subdomains-of-domain#