Well known web files, SSRF, Exploiting internal api, git history, port knocking, exposed docker daemon, escaping docker by mounting host volume

Subdomain enumeration, Gila CMS, Wildcard injection