Reconnaissance

Search engines

• https://threatintelligenceplatform.com/

• https://viewdns.info/

• https://search.censys.io/

• https://www.shodan.io/

Find vhosts

• https://pentest-tools.com/information-gathering/find-virtual-hosts

CLIs

• whois

• nslookup

• dig

• host

• traceroute / tracert