amass enum
命令手册Find subdomains of a domain. More information: https://github.com/OWASP/Amass/blob/master/doc/user_guide.md#the-enum-subcommand.
amass enum -passive -d {{domain_name}}
amass enum -active -d {{domain_name}} -p {{80,443,8080}}
amass enum -brute -d {{domain_name}}
amass enum -o {{output_file}} -d {{domain_name}}
amass enum -o {{output_file}} -dir {{path/to/database_directory}}