Fastest tool to return the subdomains of the target domain.
<aside> 💡 Its really-really fast.
</aside>
go get -u github.com/tomnomnom/assetfinder
assetfinder tesla.com >> tesla-sbs.txt
cat tesla-subs.txt | wc -l
But its also finding assets related to tesla or that might should be owned by tesla.
assetfinder –subs-only tesla.com
But, its better to use assetfinder tesla.com and then latter grep out the subdomains.