wfuzz

wfuzz fuzzes things.

Discover subdomains

wfuzz -c -w /opt/seclists/Discovery/DNS/subdomains-top1million-5000.txt -u "https://FUZZ.7minsec.com" --sc 200,301,301,401 -Z

Source: X. This site gave me some good ideas as well.

Discover Web content

wfuzz -c -w /opt/seclists/Discovery/Web-Content/directory-list-2.3-big.txt -u "https://7minsec.com/FUZZ" --sc 200,301,301,401 -Z