nmap, wapalyzer,dig - DNS Enumeration, subdomains, hydra, SSRF Vulnerability, Burp Suite, Command Injection