- Enumeration
- Packet Capture
- Host Discovery
- Services / Ports
- 21 - FTP
- 22 - SSH
- 25 - SMTP
- 53 - DNS
- 67 - DHCP
- 69 - TFTP
- 79 - Finger
- 88 - Kerberos
- 111 - RPC
- 113 - ident
- 135 - MSRPC
- 137 - Netbios
- 139/445 - SMB
- 161 - SNMP
- 177 - XDMCP
- 363 - LDAP
- 443 - HTTPS
- 500 - IKE (IPSEC)
- 512/513/514 - R Services
- 623 - IPMI
- 873 - RSYNC
- 1099 - Java RMI
- 1433 - Microsoft SQL
- 1521 - Oracle DB
- 2049 - NFS
- 3306 - MySQL
- 3389 - RDP
- 5432 - PostgresSQL
- 5900 - VNC
- 5985 - WinRM
- 6000 - X11
- 6379 - Redis
- 8080 - Jenkins
- 11211 - Memcached
- RDS
- SQLite
- Docker
- IPV6
- Gaining Access
- Exploitation
- Privilege Escalation
- Breakout
- Presistance
- Pivoting
- Password Cracking
- Tools
- Others