Recon & mapping.

Before attacking, map: fingerprint the stack (headers, errors, framework tells), enumerate content (paths, APIs, parameters), and note every input and every trust boundary. A thorough map beats a fast exploit — most misses are missed surface.