Search the directory structure of the site
- Search in search engines
parent directory site:目标域名/网址. - Use the modules in Metasploit
auxiliaryscanner/http/dir_scanner.
Search email address
- Search in the search engine and
site:目标域名 filetype:xlsget it from the information in the file. - Use Metasploit modules
auxiliary/gather/search_email_collector.