The way I do my recon on web applications both vertical and horizontal reconnaissance is to combine a couple of tools into one bash...