mencari subdomain dan ip nya

subdomain finder / mencari ip dari subdomain / mencari subdomain dan ipnya
buat linux
===
#install nmap terlebih dulu
sudo apt install nmap
--
#cara menggunakannya contoh untuk domain google.com
nmap --script dns-brute google.com

========
hasil contoh :
~$ nmap --script dns-brute google.com
Starting Nmap 7.80 ( https://nmap.org ) at 2020-06-11 11:56 WIB
Nmap scan report for google.com (216.239.38.120)
Host is up (0.028s latency).
Other addresses for google.com (not scanned): 2404:6800:4003:c04::71
rDNS record for 216.239.38.120: any-in-2678.1e100.net
Not shown: 997 filtered ports
PORT    STATE SERVICE
53/tcp  open  domain
80/tcp  open  http
443/tcp open  https

Host script results:
| dns-brute:
|   DNS Brute-force hostnames:
|     admin.google.com - 74.125.24.100
|     admin.google.com - 74.125.24.101
|     admin.google.com - 74.125.24.102
|     admin.google.com - 74.125.24.113
|     admin.google.com - 74.125.24.138
|     admin.google.com - 74.125.24.139
|     admin.google.com - 2404:6800:4003:c03::64
|     ads.google.com - 172.217.194.100
|     ads.google.com - 172.217.194.101
|     ads.google.com - 172.217.194.102
|     ads.google.com - 172.217.194.113
|     ads.google.com - 172.217.194.138
|     ads.google.com - 172.217.194.139
|     id.google.com - 142.250.4.94
|     ads.google.com - 2404:6800:4003:c04::8a
|     id.google.com - 2404:6800:4003:c04::5e
|     images.google.com - 172.217.194.100
|     images.google.com - 172.217.194.101
|     images.google.com - 172.217.194.102
|     images.google.com - 172.217.194.113
|     images.google.com - 172.217.194.138
|     images.google.com - 172.217.194.139
|     images.google.com - 2404:6800:4003:c03::8b
|     news.google.com - 172.217.194.100
|     news.google.com - 172.217.194.101
|     news.google.com - 172.217.194.102
|     news.google.com - 172.217.194.113
|     news.google.com - 172.217.194.138
|     news.google.com - 172.217.194.139
|     news.google.com - 2404:6800:4003:c03::66
|     ns.google.com - 216.239.32.10
|     alerts.google.com - 172.217.194.100
|     alerts.google.com - 172.217.194.101
|     alerts.google.com - 172.217.194.102
|     alerts.google.com - 172.217.194.113
|     alerts.google.com - 172.217.194.138
|     alerts.google.com - 172.217.194.139
|     alerts.google.com - 74.125.68.100
|     alerts.google.com - 74.125.68.101
|     alerts.google.com - 74.125.68.102
|     alerts.google.com - 74.125.68.113
|     alerts.google.com - 74.125.68.138
|     alerts.google.com - 74.125.68.139
|     ns1.google.com - 216.239.32.10
|     alerts.google.com - 2404:6800:4003:804::200e
|     ns1.google.com - 2001:4860:4802:32::a
|     dns.google.com - 8.8.4.4
|     dns.google.com - 8.8.8.8
|     ap.google.com - 74.125.24.103
|     ap.google.com - 74.125.24.104
|     ap.google.com - 74.125.24.105
|     ap.google.com - 74.125.24.106
|     ap.google.com - 74.125.24.147
|     ap.google.com - 74.125.24.99
|     dns.google.com - 2001:4860:4860::8844
|     dns.google.com - 2001:4860:4860::8888
|     ap.google.com - 2404:6800:4003:808::2004
|     ns2.google.com - 216.239.34.10
|     ipv6.google.com - 2404:6800:4003:c04::8b
|     ns2.google.com - 2001:4860:4802:34::a
|     ns3.google.com - 216.239.36.10
|     ns3.google.com - 2001:4860:4802:36::a
|     apps.google.com - 172.217.194.100
|     apps.google.com - 172.217.194.101
|     apps.google.com - 172.217.194.102
|     apps.google.com - 172.217.194.113
|     apps.google.com - 172.217.194.138
|     apps.google.com - 172.217.194.139
|     apps.google.com - 74.125.68.100
|     apps.google.com - 74.125.68.101
|     apps.google.com - 74.125.68.102
|     apps.google.com - 74.125.68.113
|     apps.google.com - 74.125.68.138
|     apps.google.com - 74.125.68.139
|     ldap.google.com - 216.239.32.58
|     apps.google.com - 2404:6800:4003:804::200e
|     ldap.google.com - 2001:4860:4802:32::3a
|     download.google.com - 74.125.24.103
|     download.google.com - 74.125.24.104
|     download.google.com - 74.125.24.105
|     download.google.com - 74.125.24.106
|     download.google.com - 74.125.24.147
|     download.google.com - 74.125.24.99
|     download.google.com - 2404:6800:4003:808::2004
|     upload.google.com - 216.58.221.79
|     upload.google.com - 2404:6800:4003:c00::75
|     local.google.com - 74.125.24.100
|     local.google.com - 74.125.24.101
|     local.google.com - 74.125.24.102
|     local.google.com - 74.125.24.113
|     local.google.com - 74.125.24.138
|     local.google.com - 74.125.24.139
|     local.google.com - 2404:6800:4003:c06::64
|     mail.google.com - 172.217.194.17
|     mail.google.com - 172.217.194.18
|     mail.google.com - 172.217.194.19
|     mail.google.com - 172.217.194.83
|     mail.google.com - 2404:6800:4003:c03::11
|     blog.google.com - 172.217.194.191
|     blog.google.com - 74.125.24.191
|     blog.google.com - 2404:6800:4003:c03::bf
|     vpn.google.com - 64.9.224.68
|     vpn.google.com - 64.9.224.69
|     vpn.google.com - 64.9.224.70
|     web.google.com - 172.217.194.100
|     web.google.com - 172.217.194.101
|     web.google.com - 172.217.194.102
|     web.google.com - 172.217.194.113
|     web.google.com - 172.217.194.138
|     web.google.com - 172.217.194.139
|     web.google.com - 74.125.68.100
|     web.google.com - 74.125.68.101
|     web.google.com - 74.125.68.102
|     web.google.com - 74.125.68.113
|     web.google.com - 74.125.68.138
|     web.google.com - 74.125.68.139
|     web.google.com - 2404:6800:4003:804::200e
|     mobile.google.com - 172.217.160.43
|     whois.google.com - 216.239.34.22
|     mobile.google.com - 2404:6800:4003:c03::c1
|     whois.google.com - 2001:4860:4802:34::16
|     www.google.com - 74.125.24.103
|     www.google.com - 74.125.24.104
|     www.google.com - 74.125.24.105
|     www.google.com - 74.125.24.106
|     www.google.com - 74.125.24.147
|     www.google.com - 74.125.24.99
|     www.google.com - 2404:6800:4003:c02::68
|     chat.google.com - 172.217.194.100
|     chat.google.com - 172.217.194.101
|     chat.google.com - 172.217.194.102
|     chat.google.com - 172.217.194.113
|     chat.google.com - 172.217.194.138
|     chat.google.com - 172.217.194.139
|     chat.google.com - 2404:6800:4003:c00::64
|     help.google.com - 172.217.194.100
|     help.google.com - 172.217.194.101
|     help.google.com - 172.217.194.102
|     help.google.com - 172.217.194.113
|     help.google.com - 172.217.194.138
|     help.google.com - 172.217.194.139
|     help.google.com - 74.125.68.100
|     help.google.com - 74.125.68.101
|     help.google.com - 74.125.68.102
|     help.google.com - 74.125.68.113
|     help.google.com - 74.125.68.138
|     help.google.com - 74.125.68.139
|     help.google.com - 2404:6800:4003:804::200e
|     home.google.com - 172.217.194.100
|     home.google.com - 172.217.194.101
|     home.google.com - 172.217.194.102
|     home.google.com - 172.217.194.113
|     home.google.com - 172.217.194.138
|     home.google.com - 172.217.194.139
|     corp.google.com - 172.217.194.129
|     home.google.com - 2404:6800:4003:c03::8a
|     corp.google.com - 2404:6800:4003:c03::81
|_    *A: 36.86.63.182

Nmap done: 1 IP address (1 host up) scanned in 17.37 seconds