[ ] Read program scope
[ ] Identify scope type (Large / Medium / Small)
[ ] Pick a target that has more functionalities. ( More Functionalities = more scope for vulnerabilities )
Large scope - Any FIS asset is in scope
Medium scope - *.fisglobal.com
Small scope - admin.fisglobal.com
Login page / sign-up pages
Contact us Forms / feed back forms
input fields
parameters
Google Dorking
subdomain Enum
URL inputs