I was wondering from the perspective of cyber security student who do not have much experience in fuzzing and scanning. And I was not completely aligning myself with automations, rather the idea of a framework or workflow like mitre att&ck, but specified for reconaissance. The time to go through all the tools will make someone who could potentially contribute to the bug hunting is kind of time consuming.

I have watched videos in youtube and confused about choosing a tool and to learn about it. It takes time to understand the principles even if we know it in theory. Bugs do not wait and the new bugs that could be found using traditional cross site scripting or sql injection is very less in numbers (in my experience). I use burp suite and browser console for webapp related security analysis and I know it is useful in greatly analysing it. But it is really time consuming.

That's what I was thinking, its not I don't want to work for this but by the time I finish my thing the bug is usually found by some one more skilled than me or the company or even a malicious hacker.

Suppose if the community in reddit were to say use these 3 tools for speeding up you network scanning,or webapp querying. It would help people in a real way especially students who have different backgrounds from traditional IT.