Enumeration Mindmap

HTTPS (Port 443)

SMTP

FTP (Port 21)

nmap scripts

SMB (Port 139/445)

wafw00f

whatweb

Postgres

SNMP

smbenum

smtp-enum-vrfy

smb-enum shares

Oracle

HTTP (Port 80)

RPC

sslyze

gobuster-cgi

rpcinfo

NFS

nbtscan

gobuster-common

postgres-default

RDP (Port 3389)

ncrack

x11screen

nikto

curl

firewall?

MySQL

smb-enum policies

snmpcheck

oracle-default

x11screen

bannergrab

showmount

smb-enum users

oracle-version

LDAP

smb-enum null sessions

ssl-scan

gobuster-common

cewl

enum4linux

smtp-enum-rcpt

smb-enum admins

bannergrab

MSSQL

smtp-enum-expn

smb-enum groups

oracle-sid

nikto

sslscan

nmap - smb vulns

ftp-default

gobuster-cgi

rdp-sec-check

w3m

samrdump

manual browsing

ldapsearch

mysql-default

ftp-vulnerability-scan

mysql-vulnerability

cewl

mssql-default

smb-enum sessions

polenum

whatweb

mssql-vulnerability

dirbuster

curl

w3m

nmap scripts

dirbuster

LFI?

wafw00f

smbmap