Recon
Domena:
Directory listing vulnerabilities
Exposed Configuration files
Exposed Database files
Exposed log files
Backup and old files
Login pages
SQL errors
Publicly exposed documents
phpinfo()
Find WordPress
Finding Backdoors
Install / Setup files
Open Redirects
Apache STRUTS RCE
Find Pastebin entries
Employees on LINKEDIN
.htaccess sensitive files
Find Subdomains
Find Sub-Subdomains
Find WordPress #2
Search in GITHUB
Test CrossDomain
Check in ThreatCrowd
Find SWF
Find MIME-SWF
Find SWF links in the past
Find MIME-SWF links in the past
Search in Web Archive #1
Search in Web Archive #2
Certificate Transparency
Search OpenBugBounty
Search in Reddit
Search WP Config Backup
Search in Censys (IPv4)
Search in Censys (Domain)
Search in Censys (Certificates)
Search in SHODAN
Vulnerable Servers
ArcGIS REST Services Directory
wp-content Juicy Info
main.yml file
Admin Portal
Wordpress Juicy file 1
File Upload
Vulnerable Wordpress Plugin
Sensitive File
Sharing API Info
Sensitive Admin Backup
Github API
Wordpress Juicy file 2
Drupal Login
Joomla Database/
Sql File
Wordpress Juicy file 3
Remote procedure call protocol
Sensitive File
jwks-rsa file
Wordpress Backup
Mysql file
Sensitive File
Docker-Compose yml file
Sensitive File
Sensitive File
Directories containing SQL Installs and/or SQL databases
link 1
link 2