Cheat Sheets, Methodologies etc.
https://github.com/ice3man543/subfinder
subfinder -d domain.name -o /path/to/output
https://github.com/blechschmidt/massdns
massdns -r ./massdns/lists/resolvers.txt -t A -o S /path/to/subfinderoutput > /path/to/output
Get uniq IPs:
cat /path/to/massdnsoutput | grep -E "A " | sed 's/.*A //' | sort | uniq > UniqIPs.txt
https://github.com/robertdavidgraham/masscan
masscan -iL UniqIPs.txt -p<portrange> --rate <somerate> > /path/to/output