Search for and resolve subdomain names

subdomains.sh-session

$ snap install amass
...
$ amass enum -d cicese.mx -src
[DNS]             cicese.mx
[HackerTarget]    imp-udb10.cicese.mx
[HackerTarget]    wireless-oc211.cicese.mx
[RapidDNS]        dhcp-ac14.cicese.mx
[HackerTarget]    pc-lankahuasa1.cicese.mx
...
[RapidDNS]        cicese-auditorio.cicese.mx
[HackerTarget]    desk-virtual11.cicese.mx
[HackerTarget]    pc-ecopos20.cicese.mx
[HackerTarget]    dhcp-fisapl111.cicese.mx
[RapidDNS]        chalchicuitle6.cicese.mx

OWASP Amass v3.19.2                               https://github.com/OWASP/Amass
--------------------------------------------------------------------------------
322 names discovered - api: 219, scrape: 89, cert: 6, dns: 5, archive: 3
--------------------------------------------------------------------------------
ASN: 3640 - CICESE
	158.97.0.0/18     	194  Subdomain Name(s)
	158.97.128.0/19   	1    Subdomain Name(s)
	158.97.128.0/17   	57   Subdomain Name(s)
	158.97.64.0/19    	76   Subdomain Name(s)
	158.97.112.0/22   	2    Subdomain Name(s)
	158.97.96.0/20    	6    Subdomain Name(s)

The enumeration has finished
Discoveries are being migrated into the local database
$ amass db -names -ipv6 -d cicese.mx
web-test.cicese.mx 2801:c4:f4:a244::17
pc-jezams.cicese.mx 2801:c4:f0:80:80::35
hespera.cicese.mx 2801:c4:f4:240::49
mac-jezams.cicese.mx 2801:c4:f0:80:80::45