Tools
Protocol Enumeration Tools
Network Protocols
Nmap - Network scanning and service discovery, including protocol detection.
Masscan - Fast port scanner, ideal for enumerating open ports and protocols.
Netcat - Networking utility for banner grabbing and testing services over various protocols.
ZMap - High-performance network scanner, supports protocol enumeration on a large scale.
Unicornscan - Open-source network scanning tool for gathering information on network services and protocols.
Wireshark - Network protocol analyzer for inspecting packets and detecting various network protocols.
Tcpdump - Command-line packet analyzer for inspecting network traffic and enumerating protocols.
Ncat - A feature-packed networking utility to interact with protocols on a network.
Service Enumeration
Service Scan (Nmap) - Nmap service detection (-sV) to identify protocols and their versions running on open ports.
WhatWeb - Identifies technologies, including protocols used by websites.
Nikto - Web server scanner that identifies the services and protocols running on web servers.
Banner Grabbing (Netcat) - Used for grabbing banners from services to determine which protocols are running.
SSLscan - Scans SSL/TLS services and provides detailed information about the protocols supported.
Web Protocol Enumeration
Burp Suite - Identifies and enumerates web services and protocols (HTTP, WebSockets, etc.) through intercepting proxy.
DirBuster - Brute-forces directories and files, also enumerates HTTP-related protocols and services.
Gobuster - Directory and subdomain brute-forcing tool for identifying HTTP protocols and services.
DNS Enumeration
DNSrecon - DNS enumeration tool for discovering DNS servers and associated records.
Dnsdumpster - Online DNS mapping tool for discovering domain-related protocols.
Fierce - DNS reconnaissance tool for detecting DNS records, protocols, and services.
SMB & Windows Protocols
Enum4linux - Linux tool for enumerating SMB shares, users, and services on Windows machines.
smbclient - A command-line tool to interact with SMB/CIFS services.
Impacket - A collection of Python classes for working with network protocols, including SMB, MSSQL, LDAP, etc.
LDAP Enumeration
ldapenum - LDAP enumeration tool for discovering users, groups, and attributes in Active Directory.
Nmap LDAP Scan - Using Nmap to scan and enumerate LDAP services (with
-p 389
and-sV
flags).
SNMP Enumeration
Snmpwalk - A command-line tool to enumerate SNMP-enabled devices.
Onlions-SNMP-Tools - A set of SNMP-related tools for scanning and enumeration.
SMTP/POP3/IMAP Enumeration
SMTP-User-Enumeration - A tool for enumerating valid SMTP users.
Nmap SMTP Scan - Nmap service detection to identify SMTP, POP3, and IMAP services and their versions.
EnumSMTP - A tool for user enumeration via SMTP.
Other Protocols
FTP-Scripts (Nmap) - Nmap scripts for scanning and enumerating FTP servers and protocols.
FTP-User-Enumeration - A tool for enumerating users on FTP servers.
RTPScan - A tool for detecting and enumerating RTP-based protocols.
Last updated