• dirb (used to find commonly-named directories on a website - like how under https://www.tesla.com there is also https://www.tesla.com/about, https://www.tesla.com/model3, https://www.tesla.com/modely, and most importantly https://www.tesla.com/models WITH LUDICROUS MODE!! ♥)
  • dirbuster (similar to dirb but with a cooler name, and with a user interface)
  • enum4linux (tool used specifically for Linux to find vulnerabilities)
  • metasploit (this tool is mostly used for exploitation, but it also has some built-in enumeration tools)
  • Burp Suite (this tool can be used to scan a website for subdirectories and to intercept network traffic)