To enumerate subdomains of a given domain

To identify public IP addresses and their distribution within hosting environments

To bypass security mechanisms on a target server

To brute force application login systems