以下是一些常用的子域名查询工具:
DNSdumpster: https://dnsdumpster.com/
Sublist3r: https://github.com/aboul3la/Sublist3r
Subfinder: https://github.com/projectdiscovery/subfinder
Amass: https://github.com/OWASP/Amass
Knockpy: https://github.com/guelfoweb/knock
Fierce: https://github.com/mschwager/fierce
Recon-ng: https://github.com/lanmaster53/recon-ng
TheHarvester: https://github.com/laramies/theHarvester
Shodan: https://www.shodan.io/
Censys: https://censys.io/