Port scanning
External: Internal All The Things — Network Discovery
Example: Xxxxxx
Tools: Nmap Netcat (Banner Grabbing, Service Checks, Basic Port scanning)
Website / Web Server
Tools: Curl Gobuster (directory/file brute-force, DNS subdomain enum, vhost discovery) Nikto (vulnerability scanning, misconfigurations, outdated software detection) CMSeeK - cmseek (CMS detection — WordPress, Joomla, Drupal, 180+ CMSs) WPScan (WordPress — user enum, plugin/theme vulns, credential brute-force)
Server
Tools: Curl
AD
Tools: Bloodhound + Sharphound