What hunt is for
Use hunt only after you already know enough about the target to focus effort.
- Collect historical URLs.
- Deep-crawl for APIs, JS endpoints, and forms.
- Expand hidden parameters.
- Probe XSS and template-driven vulnerabilities.
- Check network-level weakness on exposed services.