subdomain_online

//change hackerone.com to any domain to extract subdomains 


curl -s "https://crt.sh/?q=%25.hackerone.com&output=json" |jq -r '.[].name_value' | sed 's/\*\.//g' | sort -u | grep -o "\w.*hackerone.com" | sort -u  >> output.txt
curl https://www.threatcrowd.org/searchApi/v2/domain/report/?domain=hackerone.com | jq '.' | sort -u | grep hackerone.com >> output.txt
curl https://api.hackertarget.com/hostsearch/?q=hackerone.com | cut -d',' -f1 | sort -u | grep hackerone.com >> output.txt
curl https://certspotter.com/api/v0/certs?domain=hackerone.com | sort -u >> output.txt
curl http://web.archive.org/cdx/search/cdx?url=*.hackerone.com/\&output=text\&fl=original\&collapse=urlkey |sort| grep hackerone.com |sed -e 's_https*://__' -e "s/\/.*//" -e 's/:.*//' -e 's/^www\.//' | sort -u >> output.txt 
curl http://index.commoncrawl.org/CC-MAIN-2018-22-index?url=*.hackerone.com\&output=json | jq -r .url | sort -u >> output.txt
curl https://api.threatminer.org/v2/domain.php?q=hackerone.com\&rt=5 | jq '.' | sort -u | grep hackerone.com >> output.txt
curl https://dns.bufferover.run/dns?q=.hackerone.com |jq -r .FDNS_A[]| cut -d',' -f2| sort -u >> output.txt