Google Dorker with GHDB payloads. It has about 300 payloads to check for.
python dorker.py -d domain.com
This will crawl the domain and all subdomain for the payloads.
Install Google search from this repository https://github.com/MarioVilas/googlesearch