subfinder -d [target] >> hosts | assetfinder -subs-only [target] >> hosts | amass enum -norecursive -noalts -d [target] >> hosts | subjack -w hosts -t 100 -timeout 30 -ssl -c ~/subjack/fingerprints.json -v 3 >> takeover