Articles, write-ups, and musings concerning the world of cybersecurity and technology.
Routine network enumeration turned up a shared folder full of plaintext employee passwords. Here's the memo that went up the chain — and the case for the free tool used to dig further.
Once you're inside a network, you're basically blind until you enumerate it. Enumeration builds a working picture of the hosts, services, and accounts actually present, so you can plan a next move instead of guessing one.
Once you have a target IP or domain, nmap can tell you a lot: the operating system, the services running and their versions, and which ports are open. Here's the quick version of how the OS-detection side works.
