# directories and fiels
dirb <url> <wordlist>
Doesn't do recursive
# directories and files
gobuster dir -u <url> -w <wordlist>
-q -n -e # for grep
-x "<filetype" # to include files
# subdomains, with ips
gobuster dns -d <url> -w <wordlist> -i
python Sublist3r.py -d <url>
# directories and files
python dirsearch.py -u <url> -e <exts>
# exts e.g. php,html,png,js,jpg - or -E for common
GUI
javascript endpoints
python linkfinder.py -i <url> -d # entire domain
nmap -p 80 --script dns-brute.nse <url>