Penetration › Module 4 › Lesson 4
Lab — Enum
Pack enumeration workbook — service table, versions, note template — literacy file only, dest $LAB_HOST.
Visual · pentest_enum_lab
Lab: write enum pack. $LAB_HOST only. Original Cyberlium.
Opening
Enumeration workbook before deep probes — same artifact reports reuse.
Lessons 4-1 through 4-3 built ports/services table, versioning column, and note template. This lab combines them into one enumeration workbook for $LAB_HOST. Optional: one logged scan line against $LAB_HOST if RoE and recon packs exist — still no full exploit chain. No dorm scans. No café banners. Next: Quiz — Service Enumeration.
1. Lab contract: write the enum workbook
Create $HOME/cyberlium-lab/t19-m04-l04-enum-lab.txt merging service table, version column, note template, and NEVER stranger lines.
Optional: populate one row from $LAB_HOST if you ran a scoped scan — placeholders OK if lab VM is offline.
Command guide
Try these commands — Lab contract: write the enum workbook
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Enum lab — version + script output to file Nmap — https://nmap.org/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install nmap
macOS:
Command — copy this
brew install nmap
Windows:
Command — copy this
choco install nmap # or download https://nmap.org/download.html
═══ LINUX / macOS ═══
Command — copy this
source "$HOME/cyberlium-lab/t19-lab.env" nmap -sV -oN "$HOME/cyberlium-lab/t19-enum.txt" --top-ports 30 "$LAB_HOST" grep -E 'open|Service' "$HOME/cyberlium-lab/t19-enum.txt" | head -15
Primary tools to practice this lesson: nmap, grep. Reference sites: Enum lab; Nmap (https://nmap.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Cross-check enumeration scope
Verify RoE, scope, and recon packs all name $LAB_HOST. Redact stranger examples from drafts.
Tutorial enumeration on public IPs gets rewritten to YOUR lab mentally.
3. Lock the proof
chmod 600 on workbook. Quiz next — then Exploit Literacy.
Clean enumeration notes make exploit validation (lab-only) and reporting possible later.
4. What you ship: enumeration workbook for $LAB_HOST
Service table + versions + note template. $LAB_HOST only. NEVER stranger enum. chmod 600.
5. What you record before the next lesson
Date. Enum workbook path. Optional $LAB_HOST row. File t19-m04-l04-enum-lab.txt chmod 600.
6. Wrong vs right: stranger nets vs YOUR lab VMs
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Import classmate scan into workbook. Skip file and scan dorm.
Right
Write YOUR enum workbook for $LAB_HOST. chmod 600. Next: Quiz — Service Enumeration.
Mission: freeze YOUR enum workbook on disk
1) Merge table, version column, note template. 2) Name $LAB_HOST as sole target. 3) chmod 600. Never include stranger IPs.
Stuck? Ask Cyberlium AI Mentor
Workbooks beat memory when you revisit the lab weeks later.
Knowledge Check
APPLY: This lab requires:
Multiple choice
Knowledge Check
APPLY: True or False: Optional scan rows must reference $LAB_HOST only.
True or False
Knowledge Check
APPLY: Enumeration workbook combines:
Multiple choice