In the last lecture, we saw an introduction to an numeration in this lecture, we will see two types
of enumeration.
The first is netball's and numeration.
Netball's is a unique 16 ASCII character.
String used to identify the network devices over TCP IP 15 characters are used for the device name and
the 16 character is reserved for the service on name.
Record type attackers use the networks and numeration Gupton list of computers that belong to the domain
list of shares on the individual who's in the network policies and passwords.
And that utility in Windows displays netbacks over TCP IP protocol statistics networks name tables for
both local and remote computers and the net name Cachets.
Haina shows shares and user login names for Windows servers and domain controls.
It displays graphical representation of Microsoft Terminal Services, Microsoft Windows Network, Bigland
and many more.
Next is the S&P and Numeration S and P stands for Simple Network Management Protocol.
As an MP and numeration is a process of enumerating user accounts and devices on a target system.
Using an MP as an MP consists of a manager and an agent.
Agents are embedded on every network device and the manager is installed on a separate computer as an
MP holds two passwords to access and configure that as an invasion from the management station to password
to read community string.
It is public by default.
It allows the weaving of device configuration and rerate community stream.
It is private by default and allows remote editing of configuration.
Attackers used his default community strings to extract information about the device attackers enumerated
as an attempt to extract information about network resources such as hosts, doubter's devices, shares
and minimal network information such as ERP tables, routing tables, traffic information is obtained
through S&P and numeration.
So how to avoid as an MP and numeration removed as an agent or turn off the essential services on your
computer?
If shutting of the S&P is not an option, then change the default community.
String names upgrade to S&P three, which includes passwords and messages.
Implement the policy security option CORELESS.
The additional restrictions for anonymous connections.
Ensure that the access to decision pipes, television sets and IP filtering is restricted.
Also disable the danger zone transfer to untested hosts.
In the next video, we'll start with the practicals on an numeration.
The first spectacle is a numeration using super scan.