how to get all subdomains for a target domain

[HACK-IT]

HI all;

i need help. i am searching a tool that could list all subdomains for a target domain ex : .edu.* , i would like to collect all subdomains of this target for example i tried goorecon but it result only 60 subdomains for my target at the other hand when searching manually through google i found 200 subdomains

[fb1h2s]

Hey i have made a script in python a long time back what it does is
1]Reverses IP a given domain
[2]Retrives all DOMAINS on the given host
[3]Gather links from each domain
[3]Checks for FTP BUGS/SQL [GET] bugs nd reports
[5] Version 1.0 only checks SQL bugs

Use this code if u are gone check for sql vulnerabilities on the target host.
Check it out here:
Sub Domain sql/ftp scanner[serverchk version 1.0]

Grab a copy of it from packetstrom:
http://packetstormsecurity.org/UNIX/.../serverchk.rar

[williamc]

There is also subdomainer:
Edge-Security - Metagoofil - Metadata analyzer - Information Gathering