Enumeration Methodology

• Find the network range

=Use tools such as Whois Lookup

• Calculate the subnet mask 

=Use Subnet Mask Calculators

• Perform Host Discovery

=Use tools such as Nmap (nmap -sP xx.xx.xx.xx - xx)

• Perform Port Scanning

=Use tools such as Nmap (nmap -sS xx.xx.xx.xx - xx)

• Perform NetBIOS Enumeration

=Use tools such as Hyena and Network Security Auditor, NetScanTools Pro

• Perform SNMP enumeration

=Use tools such as Oputils, engineers Toolset

• Perform LDAP enumeration

=Use tools such as Softerra LDAP administrator

• Perform NTP Enumeration

=Use commands such as ntptrace, ntpdc and ntpq

• Perform SMTP enumeration

=Use tools such as Netscan tools pro

• Perform DNS enumeration

=Use Windows utility NSLookup

• Perform IPsec, VoIP, RPC and Linux enumeration

=use tools such as Nmap, Ike-scan, Svmap, NetscanTools Pro

• Document all the findings