Preparing your workspace...
Loading latest data

Enumeration is the process of extracting detailed information from identified services, systems, and applications.
Enumeration goes deeper than scanning. While scanning identifies open ports and services, enumeration attempts to gather:
Enumeration is an active information gathering process.
Enumeration helps security professionals:
Attackers often use enumeration to prepare for exploitation.
| Service | Enumeration Goal |
| SMB | Shares and users |
| FTP | Accessible files |
| HTTP | Directories and technologies |
| SMTP | User verification |
| SNMP | Device information |
| SSH | Banner information |

SMB enumeration identifies:
SMB is commonly found in enterprise environments.
FTP enumeration checks:
Web enumeration identifies:
Many services expose information through banners.
Examples:
Directory brute forcing attempts to discover hidden web paths.
Examples:
Enumeration often reveals:
This information can help during later security assessments.
Enumeration must be performed carefully because:
Security professionals should always work responsibly.
Enumeration gathers information.
Exploitation attempts unauthorized access.
These are separate phases during penetration testing.
Does enumeration gather detailed information from services?
Which protocol commonly exposes shares and workgroups?
True or False: Enumeration occurs after scanning.
Which process attempts to discover hidden web directories?
A tester wants to identify accessible files on an FTP server. Which activity should be performed?
Which service commonly exposes banners containing version information?
True or False: Enumeration and exploitation are the same process.
Which web path is commonly discovered during enumeration?
A security analyst wants to identify SMB shares on a server. Which process should be used?
Which protocol is commonly associated with anonymous file access?
True or False: Enumeration may reveal backup files.
Which information gathering phase focuses on extracting detailed service information?
Which type of enumeration targets websites and applications?
A tester discovers hidden directories on a web server. Which activity was likely performed?
Which service commonly provides device information through UDP?
Practical enumeration involves interacting with discovered services to collect useful information from target systems during security assessments.
Enumeration tools help testers analyze:
Enumeration provides deeper visibility into systems after initial scanning and reconnaissance.
enum4linux is commonly used for SMB enumeration against Windows and Samba systems.
enum4linux <IP> This tool can identify:
smbclient interacts directly with SMB shares and helps identify accessible resources.
smbclient -L //<IP>/ FTP services can be tested for accessible files and anonymous login permissions.
ftp <IP> Anonymous login attempts are common during penetration testing assessments.
Gobuster discovers hidden directories and files on web servers.
gobuster dir -u http://<IP> -w /usr/share/wordlists/dirb/common.txt Nikto scans web servers for outdated software, dangerous files, and insecure configurations.
nikto -h http://<IP> WhatWeb identifies technologies and frameworks used by websites.
whatweb http://<IP> Netcat interacts directly with services and captures banners exposed by servers.
nc <IP> 25 Telnet is useful for testing service responses and collecting banners manually.
telnet <IP> 110 Proper enumeration improves visibility into target systems and helps security professionals identify weaknesses efficiently.
Which tool is commonly used for SMB enumeration?
Which command lists SMB shares using smbclient?
True or False: Gobuster is used for directory discovery.
Which tool identifies website technologies ?
A tester wants to identify hidden directories on a web server. Which tool should be used ?
Which command is commonly used for FTP enumeration?
True or False: Nikto can identify insecure web configurations.
Which utility can manually grab banners from TCP services?
A security analyst wants to enumerate SMB shares anonymously. Which tool is commonly used?
Which tool analyzes web servers for outdated files and configurations?
Which protocol commonly uses port 445 ?
True or False: Enumeration should remain within assessment scope.
Which tool can identify technologies used by a website ?
A penetration tester wants to interact with a POP3 service manually. Which utility may be used ?
Which tool is commonly used for directory brute forcing?