Active

Port Scanning

# Quick scan (top ports)
nmap -sV -sC -T4 --top-ports 1000 target.com -oN nmap_quick.txt

# Full scan (all ports) - if time permits
nmap -p- -sV -sC -T4 target.com -oN nmap_full.txt

# Web-specific ports
nmap -p 80,443,8080,8443,3000,5000,8000,8888 -sV target.com

Web-app fingerprinting

# Nikto scan (basic)
nikto -h https://target.com -o nikto_results.txt

# Nuclei scan (comprehensive)
nuclei -u https://target.com -tags tech,panel,exposure -o nuclei_results.txt