37. Enumeration: NetBIOS, SMB, SNMP, LDAP, SMTP, NFS and DNS
37.1 What Is Enumeration and Why It Matters
Reconnaissance – publicly available info (whois, search, OSINT). Scanning – live hosts, open ports, service versions (Nmap). Enumeration – open service la query karun structured details: user lists, share names, SNMP OIDs, DNS zone dump. Samjla ka?
| Phase | Example question | Tool idea |
|---|---|---|
| Recon | Company cha domain kay? | whois, theHarvester |
| Scan | Port 445 open aahe ka? | Nmap |
| Enum | Share madhe konti folders? Konti users? | smbclient, enum4linux |
Ethics: permission nahi – gunha. Lab madhe practice, report madhe findings + remediation donhi liha. CEH / job interview madhe pan hech expected aahe: "I enumerate only in scope, and I always recommend the fix."
Ravindra Bagale's Tip
Students Nmap -sV output baghun mhantat "enumeration zhali". Version detect scanning cha bhag aahe; enumeration tevha hote jevha tumhi service protocol vaprun users/shares/zone kadhta. Interview madhe fark clear sanga – marks yetat.
Lab
Kali var nmap -sV -p 21,22,25,53,139,445,161,389,2049 192.168.56.20 chalaa. Konte services "enum candidates" ahet te note kara (SMB, SMTP, DNS, NFS...). He chapter sathi aapli hit-list. Production IP nako – fakt lab.