Blindcrawl.pl does brute force DNS lookups – When you can’t dump dns, you can still lookup every word in the dictionary.
You can download it from the following link: https://packetstormsecurity.com/files/download/24865/blindcrawl.pl
Source: https://packetstormsecurity.com/files/24865/blindcrawl.pl.html