Sublist3r [1] does a similar job, as long as you have the authorisation to use it on a particular domain, as it uses more aggressive discovery techniques. [1]

Sublist3r [1] does a similar job, as long as you have the authorisation to use it on a particular domain, as it uses more aggressive discovery techniques. [1] https://github.com/aboul3la/Sublist3r https://github.com/aboul3la/Sublist3r