Scanning & Enumeration (Nmap)

Summary

Actively probing a target to discover open ports, running services, and versions — Nmap is the standard tool, and enumeration extends this into identifying specific system details useful for exploitation.

How to Learn This

1Run Nmap against a practice lab target and interpret the scan results.
2Learn common Nmap scan types (SYN scan, service version detection) and when to use each.
3Practice enumerating a specific service (like an FTP or web server) for more detail after initial scanning.

Reconnaissance & OSINT

Exploitation Basics

More topics in Ethical Hacking & Penetration Testing

Penetration Testing Methodology Reconnaissance & OSINT Exploitation Basics Metasploit Framework Burp Suite Fundamentals Privilege Escalation Post-Exploitation Basics Password Attacks & Cracking Wireless Security Testing (Overview)Report Writing for Pentests

Stuck on this topic? Ask an Insider

Get 1:1 guidance from people who've walked this exact path — free on the InsideEdge app.

Download