Scan a domain, using a brute-force attack and a dictionary of subdomains and hostnames

DNS enumeration tool.
More information: <https://github.com/darkoperator/dnsrecon>.
Trick copyright: tl;dr; <https://github.com/tldr-pages/tldr>

dnsrecon --domain {{example.com}} --dictionary {{path/to/dictionary.txt}} --type brt

click the source code to copy install dnsrecon on any operating system with command-not-found.com