Penetration Testing: Advanced Enumeration

Enumeration is the key to achieving success with a pen test. Learn about methods of enumerating networks and target systems, and how to leverage sophisticated tools and scripts.

Introduction

• Enumeration is the key to pen testing success
• What you should know
• Disclaimer

1. Identifying Services

• Introduction to enumeration
• A refresher on Nmap
• All-port scanning with Masscan
• Digging for gold
• Angry scanning
• Passive scanning with Shodan

2. Enumerating Services

• Using Nmap scripts
• Scanning with Reconnoitre
• Scanning with Vanquish
• Enumerating with Sn1per
• Enumerating with SPARTA
• Diagnosing uncommon ports

3. Enumerating Web Servers

• What's that web server?
• Refresher on enumerating web pages
• Fuzzing the website
• Enumerating Drupal sites
• Enumerating WordPress sites
• Enumerating Joomla sites

4. Further Enumeration

• Database enumeration with sqlmap
• Enumerating in the Linux shell
• Enumerating inside Windows

Conclusion

• What's next