Recon & OSINT

Network Enumeration

Extract information from live services before attacking them. FTP, DNS, SMB, and SNMP enumeration techniques used in real network penetration tests.

Intermediate50 min6 lessons1 hands-on

Start free →I have an account

First lesson free. The full module is part of Pro.

You'll be able to

✓Enumerate FTP servers for anonymous access and exposed files
✓Extract subdomains and internal hostnames via DNS zone transfers
✓List SMB shares and users with enum4linux and Nmap scripts
✓Pull SNMP device information using default community strings

Lessons

1Enumeration vs. Scanning
2FTP Enumeration
3DNS Enumeration
4SMB & SNMP Enumeration
5Mini Lab — Analysing Enumeration Output
6Your Turn: Enumerate the HostHANDS-ON