Dictionary · Hacking Techniques and Methodologies
Enumeration
Assessment phases · Intermediate
Actively asking in-scope systems for details such as users, shares, services, or names. It goes beyond passive observation and requires permission.
This step is a conversation with a system you are allowed to question. The answers can reveal accounts or services that should not have been exposed. Defenders limit what anonymous queries can learn.
Example: An authorized test lists the service names on a lab server that the rules of engagement included.
Common misconception
- It is not the same as quietly reading public web pages. It queries systems, so it belongs inside a written scope.