Ravindra BagaleCourses & study guides

37. Enumeration: NetBIOS, SMB, SNMP, LDAP, SMTP, NFS and DNS

37.1 What Is Enumeration and Why It Matters

Reconnaissance – publicly available info (whois, search, OSINT). Scanning – live hosts, open ports, service versions (Nmap). Enumeration – open service la query karun structured details: user lists, share names, SNMP OIDs, DNS zone dump. Samjla ka?

Phase Example question Tool idea
Recon Company cha domain kay? whois, theHarvester
Scan Port 445 open aahe ka? Nmap
Enum Share madhe konti folders? Konti users? smbclient, enum4linux

Ethics: permission nahi – gunha. Lab madhe practice, report madhe findings + remediation donhi liha. CEH / job interview madhe pan hech expected aahe: "I enumerate only in scope, and I always recommend the fix."

Ravindra Bagale's Tip

Students look at Nmap -sV output and say "enumeration done". Version detection is part of scanning; enumeration is when you use the service's protocol to pull out users/shares/zones. Explain the difference clearly in interviews – it earns marks.

Lab

Kali var nmap -sV -p 21,22,25,53,139,445,161,389,2049 192.168.56.20 chalaa. Konte services "enum candidates" ahet te note kara (SMB, SMTP, DNS, NFS...). He chapter sathi aapli hit-list. Production IP nako – fakt lab.