Recon

• Identify web servers, technologies, and database

• Subsidiary and Acquisition Enumeration

• Reverse Lookup

• ASN & IP Space Enumeration and Service Enumeration

• Google Dorking

• Github Recon

• Directory Enumeration

• IP Range Enumeration

• JS Files Analysis

• Subdomain Enumeration and Bruteforcing

• Subdomain Takeover

• Parameter Fuzzing

• Port Scanning

• Template-Based Scanning(Nuclei)

• Wayback History

• Broken Link Hijacking

• Internet Search Engine Discovery

• Misconfigured Cloud Storage