Open ports and running services - Software versions and configurations - Default credentials pages - Industrial control systems (ICS/SCADA) - IoT devices - SSL certificate details - Organization-specific infrastructure