Sub dommain scanning

subfinder -d example.org
amass -d example.org

Port scanning

nmap -sV example.org

Proxy tool

burpsuite
caido

Automated fuzzing

trickest
zaproxy

URL fuzzing

ffuf

Extra tools

Find javascript files: https://github.com/GerbenJavado/LinkFinder
sqlmap: https://github.com/sqlmapproject/sqlmap
xsstrike: https://github.com/s0md3v/XSStrike

Learning ressources

Just search any topic in hacktricks