Home/Information gathering/Module 04
OverviewStart here2 min

Enumeration

Pull usernames, shares and service data from a live host.

10 units~82 minBeginner levelDomain 2 of exam

About this module

Scanning (Module 3) told you a port was open. Enumeration connects to that port and pulls out the real details behind it: usernames, shared folders, groups and device settings. It is active, so it can be logged. This module covers each enumerable service — and, in the last lesson, how defenders stop each one from leaking.

What you will learn

  • What enumeration is and how it differs from scanning
  • The key ports and what each one leaks
  • NetBIOS/SMB: users and shares
  • SNMP and the MIB
  • LDAP / Active Directory
  • DNS, NTP, NFS, SMTP and countermeasures

Module roadmap

01Enumeration BasicsLesson 1 · ~4 min
02Services & Ports to EnumerateLesson 2 · ~4 min
03NetBIOS & SMB EnumerationLesson 3 · ~5 min
04SNMP Enumeration & the MIBLesson 4 · ~5 min
05LDAP & Active Directory EnumerationLesson 5 · ~5 min
06DNS EnumerationLesson 6 · ~4 min
07NTP, NFS & SMTP EnumerationLesson 7 · ~4 min
08Enumeration CountermeasuresLesson 8 · ~4 min
09Lab: Enumerate Your Own LabLab · ~40 min
10AssessmentAssessment · ~5 min

How to study: read a lesson → answer its 2 "Check yourself" questions → do the lab → pass the assessment with 80%+. Lessons 1, 3 and 4 are the most tested. The ports are heavily tested — learn them.