Lay of the land

Move further and deeper into the scanning process to include security scanning. Enumeration is particularly successful in networks that contain unprotected network resources and services.

The distinction between reconnaissance and remote enumeration is an arbitrary grey area, and during enumeration new hosts and/or services may show up, so what you can not find here you may find there.

---

Preparation

• Build a local testlab
• Enumeration overview

Systems

• Introduction
• NetBios enumeration
• SNMP enumeration
• LDAP enumeration
• NTP enumeration
• SMTP enumeration
• DNS enumeration
• macOS enumeration
• Linux enumeration
• Windows enumeration
• Scanning virtualised systems
• Scanning cloud infrastructure

Web applications

• Introduction
• Dynamic web application scanning
• Enumerate databases
• Download or obtain and decompile binaries
• Automated vulnerability scanning
• Scanning an API

Vulnerability identification

• Introduction
• Mapping vulnerabilities to exploits
• Prioritisation of vulnerabilities
• Discovering more vulnerabilities/exploits