# New user needs help.
so i scan with nmap and get some open ports, what are the next steps? i am very new to all this

var unreadAlerts = '1';
Welcome back, purely_cabbage. You last visited: Today, 06:36 AM Log Out
You have one unread private message from dkota titled Welcome to the Forum!
New Reply

Threaded Mode New user needs help.

TechnWoE
Newbie
Posts:
9
Threads:
1
Joined:
May 2023
Reputation:
0
Credits: 5.1€ [Donate]
#1
06-03-2023, 01:54 PM
so i scan with nmap and get some open ports, what are the next steps? i am very new to all this
PM Rate
Report
Xprogrammer
VIP
Posts:
34
Threads:
8
Joined:
May 2023
Reputation:
15
Credits: 91.45€ [Donate]
#2
06-03-2023, 02:24 PM

> TechnWoE Wrote: so i scan with nmap and get some open ports, what are the next steps? i am very new to all this

Depends what are you scanning XD....
First you need to do "recon" before trying to exploit anything. That's simple : get as much informations as possible that include port scanning but you will have to do a ton of other things (service vulns, nmap tcp fingerprinting, os detection). Then you can do CVE scan with tools like jok3r or nmap NSE script like vuln. With only port scanning you already have an idea what service is running on the host, you can check the version to know its vulnerabilities for example.
Just don't forget that hacking is research and not running scripts, you will always have to find ways and tricks to exploit something nmap is a tool to help...
Here are some cool nmap command you can use to find interesting infos:

1. Banner grabbing
   Code:
   `nmap -vv -sV -A --script=banner <target>`
2. Scanning for common vulns
   Code:
   `nmap -vv -sV -A --script vuln <target>`
3. Small network scan, to know how much device there is on the current network + OS detection
   Code:
   `nmap -vv -A -Pn -O 192.168.1.1-99`

We are Light Hat Arsenal, we are hackers for the light !
PM Rate
Reply Quote // Report
DeSnake
Newbie
Posts:
4
Threads:
0
Joined:
May 2023
Reputation:
0
Credits: 5€ [Donate]
#3
06-04-2023, 06:18 AM

> TechnWoE Wrote: so i scan with nmap and get some open ports, what are the next steps? i am very new to all this

check all vulnerabilities there maybe. You'll need more than nmap. Use zap or nikto and so much more.
PM Rate
Reply Quote // Report
DerRoteMilan
Active Member
Posts:
31
Threads:
5
Joined:
Jun 2023
Reputation:
19
Credits: 0.67€ [Donate]
#4
06-06-2023, 12:37 AM
Next step would likely be to identify the services and their version for each open port
after that you search for ways to possibly attack any of these services.
you can also always consult sites like this: pentest-standard.org
There are multiple ones like this, each with a slightly different way of going about things.
The killchain is still the same for most of them. You will get familiar with the cycle very rapidly
if you practice some machines. HTB and vulnhub where my go to sites to practice
PM Rate
Reply Quote // Report

« Next Oldest | Next Newest »

New Reply

Quick Reply
Message Type your reply to this message here. Signature Disable Smilies | You have selected one or more posts to quote. Quote these posts now or deselect them.

- Subscribe to this thread

Users browsing this thread: purely_cabbage
var thread_deleted = "0"; if(thread_deleted == "1") { $("#quick_reply_form, .new_reply_button, .thread_tools, .inline_rating").hide(); $("#moderator_options_selector option.option_mirage").attr("disabled","disabled"); }