The key point of offensive security is to perform target reconnaissance Obtaining valid accurate data is a complex process. If it is done manually it takes a lot of time. Fortunately, it can be partially or fully automated.
reNgine https://github.com/yogeshojha/rengine reconftw https://github.com/six2dez/reconftw
nmap naabu dnsdumpster anubis nuclei BurpSuite httpx hydra
OpenVas Nessus
shodan.io censys