If you use any automation tools please only use the dictionary / SecLists found here to avoid wasting your time.

Targets are web applications only and not the underlying infrastructure with exception to DNS enumaration

Evil Corp has been making too much money! Find a worth charity at the bank to send some money to, once you've sent them over 1,000,000 you'll get the final flag