novaden

enumeration

15 items

Everything tagged "enumeration".

AutoRecon notes 1 min 18 Jul 2026 AutoRecon runs port scans and starts additional enumeration based on the services it finds. FTP Enumeration notes 5 min 21 Jul 2026 FTP on 21 is worth three checks: the version banner for a known exploit, anonymous access for readable or writable files, and whether an upload directory doubles as a web root. Virtual Hosts notes 1 min 19 Jul 2026 One IP can serve many sites. DNS Enumeration notes 1 min 24 Jul 2026 DNS resolves names to addresses and stores other records describing a domain. RPC Enumeration notes 1 min 24 Jul 2026 RPC lets a client call functions on another machine. feroxbuster notes 1 min 13 Sept 2026 Rust directory brute forcer whose distinguishing feature is recursion: hits on found directories are themselves enumerated by default. ffuf notes 1 min 13 Sept 2026 Web fuzzer built around a replaceable `FUZZ` keyword and response filtering. Web Content Discovery notes 9 min 18 Jul 2026 Web servers rarely link to everything they host. Network Services Handbook notes 3 min 24 Jul 2026 Port numbers suggest what may be running, but the banner and protocol response decide what the service actually is. Information Gathering notes 6 min 18 Jul 2026 Start automation and manual enumeration together. Active Directory Enumeration notes 10 min 01 Aug 2026 Enumeration is most of the work in an AD assessment. Database Enumeration notes 11 min 21 Jul 2026 Credentials pulled from an app config (`db.php`, `wp-config.php`, `configuration.php`, `.env`) open the database behind the app. SMTP Enumeration notes 3 min 22 Jul 2026 SMTP on 25 is a mail server, and the useful checks are three: read the banner for the daemon and version, ask the server which users exist with `VRFY`/`EXPN`, and test whether it will relay mail. SNMP Enumeration notes 3 min 22 Jul 2026 SNMP is a management protocol that answers queries about a host: users, running processes, installed software, network interfaces, and listening ports. SMB Enumeration notes 3 min 21 Jul 2026 SMB on 139/445 exposes file shares and host information, often without credentials.