Member-only story
Enumeration
Enumeration
Enumeration is the process of establishing an active connection to the target host to discover potential attack vectors in the computer system, information gained at this phase can be used for further exploitation of the system. It is often considered as a critical phase because few pieces of information gathered in this phase can help us directly exploit the target computer.
Information gathered in this phase
- Usernames, Group names
- Hostnames
- Network shares and services
- IPtables and routing tables
- Service settings and Audit configurations
- Application and banners
- SNMP and DNS Details
NetBIOS enumeration
NetBIOS stands for Network Basic Input Output System. It allows computers to communicate over a LAN to share files and devices like printers. NetBIOS names are used to identify network devices over TCP/IP.
NetBIOS Name List:
Benefits of NetBIOS Enumeration:
1. Information related to computers that belong to a domain.
2. Details related to shares on computers in the network.
3. Extracting policies and passwords.
SMB Enumeration
SMB stands for Server Message Block. It is mainly used for providing shared access to files, printers and miscellaneous communications between nodes on a network. It also provides an authenticated inter-process communication mechanism.
DNS Enumeration
DNS enumeration retrieves information regarding all the DNS servers and their corresponding records related to an organization. DNS enumeration will yield usernames, computer names, and IP addresses of potential target systems.
DNS — Domain Name Servers
The Internet equivalent of the phone book. They maintain the directory of domain names & translate them to internet protocol addresses.
DNS Records
The list of DNS records provides an overview of types of resource records stored in the zone files of the domain name system…
