This gives you the ability to run multiple domains within the same session. The tool only has one module that needs an API key (/api/google_site) find instructions for that on the recon-ng wiki.
Setting up Enumall for Subdomain Discovery
recon-ng from Source, clone the Recon-ng repository:
Change into the Recon-ng directory:
pip install –r REQUIREMENTS
Link the installation directory to
ln –s /$recon–ng_path /usr/share/recon–ng
Optionally (highly recommended) download:
config.py file and specify the path to Recon-ng and AltDNS as it showed in
Basic Usage for Subdomain Enumeration
–w to run a custom wordlist with recon–ng
–a to use alt–dns
–p to feed a custom permutations list to alt–dns (requires –a flag)
–i to feed a list of domains (can also type extra domains into the original command)
You can download Enumall here:
Or read more here.