Google Dorking: GHDB
site:
intitle:
inurl:
sometimes a simple search of the email domain gives you quite a list.
OSINT :: Other Community Search Engines
Websites:
Directory Brute Force
(Don't forget to change your user agent!!!)
- GoBuster
- DirBuster
- dirb http://192.168.40.140 -p http://192.168.80.80:8080
- WhatWeb - you can check a subnet too!
- Metasploit WMap
Attacking
- SQLMap
- Skipfish
