External links
Passive Scan Rules for OWASP Noir
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.