Renewal paper of my GIAC Web Application Penetration Tester certification:
Tips and scripts for reconnaissance and scanning