## If you have docker:
docker run -ti kalilinux/kali-linux-docker /bin/bash
apt update && apt upgrade
apt install wordlists nmap gobuster wfuzz

## Network scanner
# -sV to enumerate versions
# -sC defaults scripts to get a sense of what would be the protocol
# -p- all ports
nmap -sV -sC -p- <ip/range>

## Good wordlist
https://github.com/danielmiessler/SecLists

## Fuzzer: ideal to fuzz a URL
wfuzz -w <wordlist> -hc 404 <url>

## GoBuster: pretty fast at bruteforcing url
gobuster -w <wordlist> -u <url>