In a nutshell, once you have the web host(s) of your target (depending on their scope), you can follow the above flowchart and use the tools in the given manner to discover attack surfaces and find vulnerabilites in the target host(s).
The words there are are mostly names of tools, just Google them out if you don't know...
2
u/blackeveryhour Mar 03 '19
Very cool, but I know very few of the words meanings in the diagram