Discover subdomains for a given domain using DNS queries, common subdomain wordlist, and various enumeration techniques. Useful for reconnaissance phase of security testing.