Directory listing vulnerabilities
Exposed Configuration files
Exposed Database files
Find WordPress
Exposed log files
Backup and old files
Login pages
SQL errors
Publicly exposed documents
phpinfo()
Finding Backdoors
Install / Setup files
Open Redirects
Apache STRUTS RCE
Find Pastebin entries
Employees on LINKEDIN
.htaccess sensitive files
Find Subdomains
Find Sub-Subdomains

Find WordPress #2
Find WordPress [Wayback Machine]
Search in GITHUB
Search in OpenBugBounty
Search in Reddit
Test CrossDomain
Check in ThreatCrowd
Find .SWF file (Google)
Find .SWF file (Yandex)
Search SWF in WayBack Machine
Search in WayBack Machine #2
Search in WayBack Machine #3
Search in WayBack Machine [List/All]
Check in crt.sh
Check in CENSYS [IP4] | [DOMAINS] | [CERTS]
🔍 Search in SHODAN