Subdomain Scout

Passive infrastructure reconnaissance. Scour Certificate Transparency logs and DNS records to map public attack surfaces.