What is an Enumeration?
Actively probing the target to identify services, users, and devices on a
network.
Builds on OSINT phase to understand target landscape in detail.
What is an Enumerating Protocols
Identify communication rules used by devices.
Reveal potential security weaknesses in data transmission and processing.
What is an ICMP (Internet Control Message Protocol) ?
Ping
What is an IPSec (Internet Protocol Security)?
Provides encryption and authentication for secure
communication.
Testers look for supported protocols, ciphers, and configurations.
Analyze encryption algorithms and key exchange methods.
What is a SNMP (Simple Network Management Protocol)
Used for managing network devices.
Enumerate SNMP to gather network information or reconfigure
devices.
What is a SMB (Server Message Block)?
Used by Windows systems for file sharing and network services.
Identify open shares, permissions, and OS details
What is a DNS Enumeration?
Provides insights into target’s network infrastructure.
Reveals potential vulnerabilities and misconfigurations.
What is a DNS Zone Transfer?
Replicates DNS records between primary and secondary DNS servers.
Misconfigured servers allowing zone transfers can reveal detailed
information.
What is MX Records?
identify mail servers
dig MX ***.com
What is NS Records?
Identify authoritative name servers.
dig NS ***.com
Reverse DNS Lookup are
Queries DNS system to find the domain name associated with an IP
address.
DNS Brute Force Uses
a wordlist of common subdomains to discover additional
subdomains.
What are SRV Records?
Provide information about the location of specific services within a
domain.
What is Directory Enumeration?
Identifying and mapping out directories and files on a web server or within a web application.
Helps uncover hidden resources, sensitive information, and potential
attack vectors
What are Web Crawlers?
tools like:
DirBuster
Gobuster
Dirsearch
What is the function of Web Crawlers?
Automate discovering directories and files using wordlists.
What is the Purpose of Analyzing robots.txt Files?
Indicates which directories or files should not be indexed by
search engines.
What are an Error Messages?
Provide information when requesting non-existent directories or
files
Some web servers list contents of a directory if no
index file is present.
What is URL Fuzzing?
Technique: Changing URLs to discover hidden directories and files.
Tools: Burp Suite
What is the Technique of Server-Side Includes (SSI) Injections
Injecting SSI directives into URLs or form fields to execute
server-side commands or include files.
What are the tools for Enumerating Network Services and Shares?
Metasploit
net view
○ arp -a
○ net user
○ ipconfig /displaydns.
