sc0pe

A CLI that discovers in-scope subdomains for bug bounty programs! All you need to do is pass it a Burp configuration file.