Lion Cipher Lab
Enumerate the services on your OWN lab target
- Penetration Testing / Red Team
- Beginner
- ~45 min
- Free · no account required
Why it matters
A port scan tells you a door is open. That alone can't be defended or exploited — it's just a fact with no context. Enumeration is the step that adds the context: it turns "port 21 is open" into "vsftpd 2.3.4 is running on port 21," and that exact name-and-version is what you check against published vulnerability databases. Every meaningful decision downstream — patch it, firewall it, or (for an authorized tester) probe it — depends on knowing the specific service and version, not just the port number. For a defender, enumerating your own machine is how you find the outdated service you…
What you'll learn
- service enumeration
- Nmap version detection (-sV)
- Nmap default scripts (-sC)
- banner grabbing with netcat
- reading HTTP response headers
- web server and tech fingerprinting
- mapping services to known vulnerabilities
- authorized-use discipline
Steps in this lab
- The one rule, before you enumerate anything
- What enumeration is, and why a port number alone is useless
- Name the service and version with nmap -sV
- Add default scripts with -sC for extra detail
- Grab a banner by hand with netcat
- Read a web server's headers with curl -I
- Turn the findings into a fingerprint
- What you just did — and why it is the step that makes a scan mean something