You cannot test 500 subdomains manually. You need "one-liner" magic.
Before we install Burp Suite or Nmap, we need to fix your brain. Beginners fail because they suffer from —hopping from one automated scanner to another, hoping for a miracle. bug bounty masterclass tutorial