ffuf

subdomains

ffuf -c -u http://example.com/ -H "HOST: FUZZ.example.com" -w /usr/share/wordlists/seclists/Discovery/DNS/bitquark-subdomains-top100000.txt -fc 301