Perform comprehensive port scan using Nmap

Enumerate subdomains of target domain using multiple methods

Detect technologies used by target website

Bruteforce directories and files on web server

Run Nuclei vulnerability scanner

Run Nikto web vulnerability scanner

Test for SQL injection vulnerabilities

Search for Metasploit modules based on detected services

Attempt exploitation using detected vulnerabilities

Perform comprehensive automated penetration test

Analyze current findings and suggest next steps

Generate comprehensive penetration test report

Discover CVEs based on detected technologies and versions

Extract parameters from web applications using Katana and manual methods

Fuzz extracted parameters with various payloads using ffuf/wfuzz

Fuzz directories and files using ffuf/wfuzz

Advanced directory scanning with dirb/dirsearch/gobuster/feroxbuster

Generate adaptive penetration testing strategy based on detected services and OS

Comprehensive Active Directory penetration testing

Technology-specific web application penetration testing

Comprehensive SMB/NetBIOS service testing

Start Burp Suite Professional with API enabled

Stop Burp Suite instance

Perform active vulnerability scan using Burp Suite

Perform passive scan through Burp Suite proxy

Spider/crawl target using Burp Suite

Export Burp Suite scan results