$ rustscan -a ip_address

$ nmap -sC -sV ip_address
$ nmap -sC -sV -p22,80 ip_address

$ gobuster dir -w /usr/share/dirbuster/wordlists/directory-list-2.3-medium.txt --url ip_address -t 50

$ dirsearch -e php,log,sql,txt,bak,tar,tar.gz,zip,rar,swp,gz,asp,aspx -u 'http://site.com'

$ hydra -l john -P /usr/share/wordlists/rockyou.txt ip_address http-post-form "/admin/index.php:user=^USER^&pass=^PASS^:F=Username or password invalid." -V

$ ssh2john id_rsa > id_rsa.hash
$ john id_rsa.hash --wordlist=/usr/share/wordlists/rockyou.txt