How to: Table of Contents
- [Discovering](#discovering)
  - [Targets](#targets)
  - [IP Enumeration](#ip-enumeration)
  - [Subdomain Enumeration](#subdomain-enumeration)
  - [Cache](#cache)
  - [Web Asset Discovery](#web-asset-discovery)
  - [Wordlist](#wordlist)
  - [Directory Bruteforcing](#directory-bruteforcing)
  - [Parameter Bruteforcing](#parameter-bruteforcing)
  - [DNS and HTTP detection](#dns-and-http-detection)
  - [Acquisitions/Names/Addresses/Contacts/Emails/etc.](#acquisitionsnamesaddressescontactsemailsetc)
  - [Google Dorks](#google-dorks)
  - [Content Security Policy (CSP)](#content-security-policy-csp)
  - [Tiny URLs Services](#tiny-urls-services)
  - [GraphQL](#graphql)
  - [General](#general)
- [Enumerating](#enumerating)
  - [Fingerprint](#fingerprint)
  - [Buckets](#buckets)
  - [Cloud Enumeration](#cloud-enumeration)
  - [Containerization](#containerization)
  - [Visual Identification](#visual-identification)
- [Scanning](#scanning)
  - [Static Application Security Testing](#static-application-security-testing)
  - [Dependency Confusion](#dependency-confusion)
  - [Send Emails](#send-emails)
  - [Search Vulnerabilities](#search-vulnerabilities)
  - [Web Scanning](#web-scanning)
  - [HTTP Request Smuggling](#http-request-smuggling)
  - [Subdomain Takeover](#subdomain-takeover)
  - [SQLi (SQL Injection)](#sqli-sql-injection)
  - [XSS (Cross-Site Scripting)](#xss_scanning)
  - [Repositories Scanning](#repositories-scanning)
  - [Secret Scanning](#secret-scanning)
  - [CORS Misconfigurations](#cors-misconfigurations)
  - [API](#api)
- [Monitoring](#monitoring)
  - [CVE](#cve)
- [Attacking](#attacking)
  - [Brute Force](#brute-force)
  - [Exfiltration](#exfiltration)
  - [Bypass](#bypass_attacking)
  - [General](#general_attacking)
- [Manual](#manual)
  - [Payloads](#payloads)
  - [Bypass](#bypass)
  - [Deserialization](#deserialization)
  - [SSRF (Server-Side Request Forgery)](#ssrf-server-side-request-forgery)
  - [XXE (XML External Entity)](#xxe-xml-external-entity)
  - [OAuth](#oauth)
  - [DNS Rebinding](#dns-rebinding)
  - [HTTP Header Injection](#http-header-injection)
  - [SMTP Header Injection](#smtp-header-injection)
  - [Web Shell](#web-shell)
  - [Reverse Shell](#reverse-shell)
  - [SQLi (SQL Injection)](#sqli-sql-injection_manual)
  - [XSS (Cross-Site Scripting)](#xss_manual)
  - [XPath Injection](#xpath-injection)
  - [Path Traversal](#path-traversal)
  - [LFI (Local File Inclusion)](#lfi-local-file-inclusion)
  - [SSTI (Server Side Template Injection)](#ssti-server-side-template-injection)
  - [Information Disclosure](#information-disclosure)
  - [WebDAV (Web Distributed Authoring and Versioning)](#webdav-web-distributed-authoring-and-versioning)
  - [Generic Tools](#generic-tools)
- [AI](#ai)
- [General](#general_all)