WEBVTT

00:01.330 --> 00:09.820
I tell you, maybe it's because I started life as an English major in college and quickly changed majors

00:09.970 --> 00:12.130
when I realized I wouldn't get a job with that.

00:12.130 --> 00:14.290
But anyways, I did.

00:14.290 --> 00:15.730
I just love English.

00:15.940 --> 00:18.190
I guess it's no surprise how many books I've written.

00:18.490 --> 00:21.610
But anyways, why am I talking about this?

00:21.610 --> 00:23.860
It's because of the word innumerate.

00:23.890 --> 00:31.750
What a great word it is a word that is strong enough to really convey what's happening here.

00:32.050 --> 00:38.110
Attackers are enumerating as much from our network as they possibly can.

00:38.470 --> 00:46.900
They are recording all the information they can gain about users resources that are available.

00:47.230 --> 00:51.070
It is a strong word and it should be.

00:51.490 --> 00:58.390
This is where just information extraction is taking place exhaustively.

00:58.840 --> 01:05.290
And keep in mind that this is one of those rare times where we're not talking about passively.

01:05.650 --> 01:14.290
We are talking about actively querying machines and getting as much information as those machines can

01:14.290 --> 01:15.820
give as possible.

01:16.420 --> 01:22.390
Notice that the enumeration phase is often part of that reconnaissance and planning.

01:22.570 --> 01:31.690
As the bigger attack is probably coming, enumeration is often something that will identify points of

01:31.690 --> 01:33.820
attack for an attack team.

01:34.600 --> 01:43.780
Now we have to remember this almost always comes down to what services and therefore what ports we have

01:43.780 --> 01:44.410
available.

01:45.250 --> 01:48.520
And you should have some of these memorized.

01:48.880 --> 01:51.160
DNS zone transfers.

01:51.460 --> 01:59.140
What would that be utilizing either TCP or UDP port 53 Simple Network Management Protocol.

01:59.170 --> 02:01.690
UDP Port 161.

02:01.930 --> 02:04.840
Simple mail transfer for a protocol.

02:05.170 --> 02:08.410
TCP 25 l dap.

02:08.740 --> 02:09.910
I completely forget.

02:09.910 --> 02:11.410
I should know LDAP.

02:11.740 --> 02:14.760
So we should know our port numbers.

02:14.770 --> 02:18.070
And of course we have a flashcard assignment to help with these.

02:18.280 --> 02:28.350
If you find yourself struggling, well, let's get into great detail on these various enumeration techniques

02:28.360 --> 02:29.740
in the very next video.