>>11774635As we are trying to find potential hidden pages I was thinking to run zapproxy iver the url, follow all links and map out site structure.
Then follow up with an attempt to brute force interesting subdirectories with a wordlist.
Additionally fetching historic subdomain pointers and bruteforcing hidden ones.
Worst case we find a vulnerability along the way and can enjoy a payday for a change.
That would be subarashi.
