Passive

NSLookup

nslookup [OPTIONS] [DOMAIN_NAME] [SERVER]
options: a, aaaa, mx, txt, soa (start of authority)
server: cloudflare: 1.1.1.1 or 1.0.0.1, google: 8.8.8.8 or 8.8.4.4, quad9: 9.9.9.9

dig

dig [DOMAIN_NAME] [TYPE]
type: options above

Google Dorking

Directory and file enumeration:

Filter	Example	Description
site	site:tryhackme.com.	only from the specified address.
inurl	inurl:admin	have the specified word in the URL
filetype	filetype:pdf	particular file extension
intitle	intitle:admin	word present in title

Subdomain enumeration:

site:*.domain.com -site:www.domain.com

Javascript Obfuscation:

Obfuscator: https://obfuscator.io/, http://www.jsfuck.com/, https://utf-8.jp/public/jjencode.html, https://utf-8.jp/public/aaencode.html
Deobfuscatorhttps://matthewfl.com/unPacker.html
js compiler: https://jsconsole.com/