skills.rest
blacklanternsecurity
blacklanternsecurityOFFICIAL
Explore all skills by this author →
WebsiteGitHub

infrastructure-enumeration

Enumerate DNS, SMTP, SNMP, and HTTP services on target hosts.

253|37|Updated Feb 22, 2026
Search Tags:#discovery#infrastructure#dns#enumeration#misconfiguration#snmp#network services
One-click install
npx skills add https://github.com/blacklanternsecurity/red-run --skill infrastructure-enumeration
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: infrastructure-enumeration
Source: https://github.com/blacklanternsecurity/red-run/tree/main/skills/network/infrastructure-enumeration
Command: npx skills add https://github.com/blacklanternsecurity/red-run --skill infrastructure-enumeration

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires nmap, snmpwalk, onesixtyone, dnsrecon, smtp-user-enum, httpx, rpcclient, ldapsearch, whatweb, ipmitool, showmount, tftp, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and enumerate various infrastructure services running on target hosts, uncovering potential misconfigurations and information disclosure opportunities.

Core Features & Use Cases

  • Service Discovery: Detects and probes services like DNS, SMTP, SNMP, IPMI, NFS, TFTP, RPC/MSRPC, and HTTP/HTTPS.
  • Misconfiguration Detection: Identifies common vulnerabilities such as DNS zone transfer issues, SMTP open relays, weak SNMP community strings, and NFS export misconfigurations.
  • Use Case: After identifying open ports on a network segment, this Skill can systematically check for and report on exposed infrastructure services, providing a clear picture of the attack surface.

Quick Start

Use the infrastructure-enumeration skill to enumerate DNS and SNMP services on the target IP address 10.10.10.5.

Frequently Asked Questions about infrastructure-enumeration

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate infrastructure services like DNS, SNMP, and HTTP on a target host?▼

Infrastructure service enumeration detects exposed services like DNS, SNMP, and HTTP using nmap, snmpwalk, dnsrecon, and httpx. This Skill probes target hosts to identify open ports, running network services, and web technology fingerprints across a specified IP address or network segment.

What is the best way to detect DNS zone transfers and SMTP open relays during network discovery?▼

Detecting DNS zone transfers and SMTP open relays is handled by checking for misconfigurations using dnsrecon and smtp-user-enum. This Skill identifies these vulnerabilities alongside weak SNMP community strings and NFS export issues to uncover potential information disclosure opportunities.

Can I use snmpwalk and onesixtyone to find default SNMP community strings on network devices?▼

Yes, snmpwalk and onesixtyone are used to find default SNMP community strings on network devices. This Skill leverages these dependencies to detect weak community strings, identifying misconfigurations that expose sensitive device information during service discovery.

Does this enumeration approach work with IPMI, NFS, and TFTP services?▼

Yes, this enumeration approach works with IPMI, NFS, and TFTP services by utilizing ipmitool, showmount, and tftp. It probes these specific infrastructure services to detect misconfigurations such as insecure NFS exports and exposed TFTP access on target hosts.

How do I fingerprint web technologies and check for HTTP misconfigurations on exposed servers?▼

Fingerprinting web technologies and checking HTTP misconfigurations is done using httpx and whatweb. These tools identify web technology fingerprints and probe HTTP/HTTPS services to uncover potential information disclosure opportunities on exposed infrastructure servers.

What limitations should I expect when using ldapsearch and rpcclient for infrastructure enumeration?▼

When using ldapsearch and rpcclient for infrastructure enumeration, results depend on target service configurations and authentication requirements. This Skill probes RPC/MSRPC and LDAP services, but successful enumeration requires these services to be exposed and accessible without restrictive access controls.

Related Skills

Explore More Software Engineering Skills→
gongzeqgongzeq

fscan-port-scan

Scan multiple hosts for open ports and services using fscan.

Community
Advanced
trilwutrilwu
109

enumerating-network-services

Enumerate and test network services across multiple protocols to identify vulnerabilities.

Community
Advanced
AeonDaveAeonDave
15

corsy

Scan web applications for exploitable CORS misconfigurations.

Community
Intermediate
zebbernzebbern
34

OSCP Notes

Provide OSCP preparation notes with commands for service enumeration and exploitation.

Community
Advanced