Zone Transfer

nslookup

//get name servers
nslookup -type=NS <domain.com>
//transfer
nslookup
>server <ns_for_the_domain>
>ls -d domain.tld

dig

//get nameservers
dig <domain> NS
//transfer
dig axfr @<domain.tld> <domain.tld>  #dig axfr bank.htb @10.10.10.29    

dnsenum

dnsenum megacorpone.com

dnsrecon

dnsrecon -d megacorpone.com -t axfr

Example: