Finding out what exists before touching it: hosts, services, subdomains and content.
Port, service and version scanner for mapping what a host exposes.
