From the course: CompTIA CySA+ (CS0-002) Cert Prep: 1 Threat Management

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Enumeration tools

Enumeration tools

From the course: CompTIA CySA+ (CS0-002) Cert Prep: 1 Threat Management

Start my 1-month free trial

Enumeration tools

- [Instructor] Nmap is by far the most common network enumeration tool. However, there are a few other tools out there that you should be familiar with when you take the CySA+ exam. Network enumeration tools are divided into two major categories. Passive enumeration tools simply monitor network traffic and watch for signs of activity from systems. They gather information about the systems that they see on the network without ever interacting with the system or announcing their presence. For example, you can use the Wireshark packet capture tool as a passive network enumeration tool. Active enumeration tools directly interact with systems to detect their presence and determine the services that they offer. Active tools are often able to gather more complete information about a system, but they also run the risk of tipping off the system's administrator to your presence. Nmap conducts port scanning by sending requests to…

Contents