Active Recon

1. Discover all active hosts on the target IP Range/Subnets

• [ ] Nmap Host Discovery Scan
• [ ] ICMP sweep Ping
• [ ] TCP/UDP Host discovery
  • [ ] nmap -sn
• [ ] ARP Scanning

1. For all active hosts Scan for TCP/UDP Ports
2. For each port run service scan on discovered ports
3. Check for vulnerability in discovered services/service version

• [ ] Search metaspsloit for service exploits with the discovered version
• [ ] Search ExploitDB for service exploits with the discovered version