Enumeration

Gathering information that can lead to the discovery of vulnerabilities or aid in our exploitation process.

Gathering information is the first and one of the most vital stage of penetration testing. It helps to learn about the target systems we are assessing, as well as revealing information that could aid to the discovery and/or exploitation of vulnerabilities.

Enumeration methodologies varies by the environment. Below are high-level summaries for three main types of environment.


Nmap

Discover open ports and available services on your targets with Nmap

Rustscan

Scan ports faster with Rustscan

Web Recon

Gathering information on web directories, vhosts, subdomains and technologies