enumerating-network-services

Enumerate and test network services across multiple protocols to identify vulnerabilities.

109|11|Updated Nov 13, 2025

Search Tags:#vulnerability #network #enumeration #nmap #pentest #service-discovery

Ready to run

npx skills add https://github.com/trilwu/secskills --skill enumerating-network-services

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: enumerating-network-services
Source: https://github.com/trilwu/secskills/tree/main/secskills/skills/network-service-enumeration
Command: npx skills add https://github.com/trilwu/secskills --skill enumerating-network-services

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates the discovery and testing of network services to identify exposed ports, running services, and potential vulnerabilities across SMB, FTP, SSH, RDP, HTTP, databases, LDAP, NFS, DNS, and SNMP.

Core Features & Use Cases

Port scanning and service discovery with Nmap and related tooling.
Protocol-specific enumeration and vulnerability checks across common services.
Banner grabbing, version detection, and configuration auditing to support targeted exploitation or defense.
Guided recon workflows for pentesters and red teams.

Quick Start

Perform a targeted port scan and service fingerprinting with Nmap to enumerate services and guide subsequent testing.

Frequently Asked Questions about enumerating-network-services

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I enumerate network services and identify potential vulnerabilities?▼

Enumerate network services by running Nmap port scans and protocol-specific checks across SMB, FTP, SSH, RDP, HTTP, databases, LDAP, NFS, DNS, and SNMP to detect exposed ports, running services, and vulnerabilities.

What is the best way to perform service discovery and version detection during a pentest?▼

Service discovery and version detection are best performed using Nmap for targeted port scanning and banner grabbing to fingerprint running services, which guides subsequent protocol-specific exploitation or defense checks.

Does this network enumeration approach support testing common protocols like SMB and SSH?▼

Yes, this network enumeration approach supports testing common protocols including SMB, SSH, FTP, RDP, HTTP, databases, LDAP, DNS, NFS, and SNMP with structured, protocol-specific vulnerability checks and example commands.

How do I conduct a recon workflow for red teams targeting exposed network services?▼

Conduct red team recon by performing guided port-based discovery and service fingerprinting with Nmap, then applying protocol-specific enumeration to identify exposed network services and configuration weaknesses for targeted exploitation.

Can I use this for blue team risk assessment and configuration auditing?▼

Yes, blue teams can use this enumeration process for risk assessment and configuration auditing by identifying exposed ports, running services, and potential vulnerabilities to proactively secure network infrastructure.

What limitations should I anticipate when scanning multiple network protocols for vulnerabilities?▼

Limitations when scanning multiple network protocols include potential false positives during banner grabbing and the need for follow-up manual verification to accurately assess service-specific vulnerabilities and configuration risks.