Advanced Enumeration Phase

This chapter examines how to handle the enumeration phase in a penetration testing engagement. It covers the enumeration of the following services: File Transfer Protocol (FTP), SSH, Telnet, SMTP, POP3 and IMAP4, Microsoft SQL, Oracle Database Server, MySQL, Docker Engine, Jenkins, HTTP/S, Remote Desktop Protocol, Virtual Network Computing, Server Message Block, and Simple Network Management Protocol. The FTP is used to transfer files between a client and a remote server. Telnet is an old way to connect to a remote host using the TCP protocol on port 23 to manipulate the host using the command line. The best way to take advantage of a brute‐force for POP3 is to be able to extract the users first and save them to a file. Databases are the center of data; black‐hat hackers target mainly data during their attacks. Application security specialists spend most of their time hardening the databases.