37. Enumeration: NetBIOS, SMB, SNMP, LDAP, SMTP, NFS and DNS
37.1 What Is Enumeration and Why It Matters
Reconnaissance – publicly available info (whois, search, OSINT). Scanning – live hosts, open ports, service versions (Nmap). Enumeration – open service la query karun structured details: user lists, share names, SNMP OIDs, DNS zone dump. Samjla ka?
| Phase | Example question | Tool idea |
|---|---|---|
| Recon | Company cha domain kay? | whois, theHarvester |
| Scan | Port 445 open aahe ka? | Nmap |
| Enum | Share madhe konti folders? Konti users? | smbclient, enum4linux |
Ethics: permission nahi – gunha. Lab madhe practice, report madhe findings + remediation donhi liha. CEH / job interview madhe pan hech expected aahe: "I enumerate only in scope, and I always recommend the fix."
Ravindra Bagale's Tip
Students look at Nmap -sV output and say "enumeration done". Version detection is part of scanning; enumeration is when you use the service's protocol to pull out users/shares/zones. Explain the difference clearly in interviews – it earns marks.
Ravindra Bagale's Tip – मराठी
Students Nmap -sV output बघून म्हणतात "enumeration झाले". Version detect हा scanning चा भाग आहे; enumeration तेव्हा होते जेव्हा तुम्ही service protocol वापरून users/shares/zone काढता. Interview मध्ये फरक clear सांगा – marks मिळतात.
Ravindra Bagale's Tip – हिंदी
Students Nmap -sV output देखकर कहते हैं "enumeration हो गया". Version detect करना scanning का हिस्सा है; enumeration तब होता है जब आप service protocol इस्तेमाल करके users/shares/zone निकालते हो. Interview में फ़र्क clear बताओ – marks मिलते हैं.
Lab
Kali var nmap -sV -p 21,22,25,53,139,445,161,389,2049 192.168.56.20 chalaa. Konte services "enum candidates" ahet te note kara (SMB, SMTP, DNS, NFS...). He chapter sathi aapli hit-list. Production IP nako – fakt lab.