Here's the new version of CrtFinder tool which collect subdomains from crt.sh.

The new update come with more scripts which collect more and more subdomains form the same site but in more intelligence techniques <3

pip install -r requirments.txt

python crtfinder.py -u domain.com

This will come back with the subdomains from search keywords:

%.domain.com
domain.% 

and the output file will be domain.txt which will contain the results.

python dig.py domain.txt | tee -a more_subdomains.txt

this step will take more time but it will get more and more subdomains

/!\ Note: Don't change the text file name and use the one which get back from the first step (domain.txt)

If you need to increase the speed in the advanced mode so edit the code of repeat_crt.py script and delete the comment at the end of it, but you must have good CPU for Multi-threading.

Website dell.com

Standard serach ~ 4000 subdomain

Advanced search ~ 13000 subdomain