PSsubdomain is a real simple scripts that try to enumerate subdomains.
To run Either download locally or to run remotely user:
powershell –nop –c “iex(New-Object Net.WebClient).DownloadString(‘https://raw.githubusercontent.com/securethelogs/PSsubdomain/master/PSsubdomain.ps1’)”