Gobuster isn't just a directory scanner; it is a multi-purpose brute-forcer.
Gobuster is excellent for finding subdomains by brute-forcing DNS records. gobuster