Directory Busting

Gobuster

sudo gobuster dir -w '/usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt' -u http://$IP:80 -t 42 -b 400,401,403,404 --no-error

Gobuster with file extension

gobuster dir -u http://$IP -w /opt/SecLists/Discovery/Web-Content/raft-small-words.txt -x php -o gobuster.out

Ffuf subdomains

ffuf -u http://linkvortex.htb -w /opt/useful/seclists/Discovery/DNS/subdomains-top1million-5000.txt -H 'Host: FUZZ.linkvortex.htb' -fs 230