A simple commandline subdomain finder that leverages the open source tool: Sublist3r and saves the results to a file.
./venv/bin/python main.py
The main method used to find subdomains is enumeration using search engines and several DNS lookup tools. You can also enable a brute force method that leverages another open source package: subbrute