Based on @hacker_'s DEFCON 31 talk. Famialiarize yourself with asset or content discovery basics, and vhost scanning.
If you use any automation tools please only use the dictionary / SecLists found here to avoid wasting your time.
Released 11th Aug 2023
created by
Corben Leo
,
NahamSec
and
BuildHackSecure