whois
nslookup
dig
host
theHarvester - combines a bunch of search engines - https://github.com/laramies/theHarvester
- bring some API keys with you
subfinder - find subdomains for a domain - https://github.com/projectdiscovery/subfinder
js-parse - look through js files - https://github.com/l4yton/js-parse
aquatone - https://github.com/michenriksen/aquatone
https://github.com/s0md3v/Photon
look at these: https://github.com/hahwul/WebHackersWeapons
https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters/blob/master/assets/tools.md
https://github.com/tomnomnom/meg
https://github.com/hakluke/hakrawler
https://github.com/smicallef/spiderfoot
TBC