httpx -status-code -title -tech-detect -list subdomains.txt

gau target.com

gau --subs target.com

ffuf -w wordlist.txt -u https://target.com/FUZZ

ffuf -w wordlist.txt -u https://target.com/ -H "Host: FUZZ.target.com" -fc <status code to exclude>