3 tools and resources
A list of services and how to claim (sub)domains with dangling DNS records.
A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys.
An information gathering tool for DNS, subdomains, ports, and directories enumeration.