The subdomain explorer may be fun, but their Exploit Observer is really useful: https://www.exploit.observer/