Recon Interne

Scope enumeration

DNS - IP - ressources

• BGP enum
• DNS tests
• IP info
• Google dork
• Creds

Hosts - Services - Users

Wireshark

• MDNS -> Hostname
• ARP -> IP

Responder

LLMNR, NBT-NS, MDNS

Enumerate user and machines communication on your network

Nmap || Fping

Kerbrute

Account enumeration