Subdomains
Subdomain Hunting
When hunting down subdomains you are looking for developer or staging versions of a site, or admin login pages that are not public or easily found on the internet.
Website tools are not the best way to scan for subdomains, but you can try google and a couple others to see if anything interesting shows up.
Search google.com
site:tesla.com
site:tesla.com -www
site:tesla.com -www -forums inurl:dev
site:tesla.com -www -forums inurl:admin
site:tesla.com -www -forums inurl:console
Other website tools
pentest-tools.com - scans are limited and you may have to create an account now.
pentest-tools.com/information-gathering/find-subdomains-of-domain
spyse.com - Shut down.
- netlas.io
- fullhunt.io
- binaryedge.io
- crt.sh - Domain Name, Organization Name, etc, a SHA-1 or SHA-256, crt.sh ID
% = wildcard -%.tesla.com
- censys.io
- archive.org