Kali Linux Intrusion and Exploitation Cookbook

Service enumeration

Once the services have been fingerprinted, we can perform enumeration. There can be many different sources used to achieve the goal of this recipe. In this recipe, we will look at how to perform service-discovery scans using various tools, for the following:

• SMB scan
• SNMP scan
• Using the NSE (nmap scripting engine) engine

Nbtscan is a script in Kali that enumerates for the NetBIOS name of the target IP. It can be used as the early part of SMB enumeration. It basically requests a status query of the NetBIOS name in a human-readable format.

Getting ready

In this recipe, we will be using tools to enumerate all the services mentioned above.

How to do it...

For this recipe, the steps are as follows:

1. To enumerate the NetBIOS name, we will ...