ffuf

one-liner for subdomain enum, need to provide a dns.txt wordlist (seclists is a good match)

ffuf -u https://FUZZ.target.com -w dns.txt -v | grep "| URL |" | awk '{print $4}'

ffuf -w bug-bounty-program-subdomains-trickest-inventory.txt -u http://FUZZ.target.com -of html -o result