Subdomain Take Over
Find Subdomain by SubFinder tool.
Then try to find 404 or vulnerable domain by using Subzy tool.
If you get any kind of vulnerable domain or subdomain or sub-sub domain then try to take over
# Take over Gide,
1/ AWS
Gide
2/ Github