PRACTICAL NO. 3

Aim: To enumerate host, port, and service information using network scanning and DNS reconnaissance tools.

Procedure: Host, Port, and Service Enumeration
Step 1: Full Port Scan with OS and Service Detection
sudo nmap -v -p 0-65535 -A <IP_ADDRESS> -oA metasploitable2

Step 2: TCP SYN Scan with OS Detection
sudo nmap -sS -O <IP_ADDRESS>

Step 3: Service Version Detection
sudo nmap -sV <IP_ADDRESS>

Step 4: Find IP Address of Domain
host packethub.com

Step 5: Display Authoritative Name Servers
host -t ns packethub.com

Step 6: Display Mail Exchange Servers
host -t mx packethub.com

Step 7: Interactive DNS Query using nslookup
nslookup
set type=ns
packethub.com

Step 8: Display Detailed DNS Information
dig packethub.com

Step 9: Retrieve Mail Server Records
dig packethub.com mx

Step 10: Retrieve IPv4 Address
dig packethub.com a

Step 11: Retrieve Name Server Records
dig packethub.com ns

Step 12: Display Domain Registration Details
whois facebook.com

Step 13: Perform DNS Reconnaissance
dnsrecon -t std -d ww.packethub.com

Step 14: Detect Web Application Firewall
wafw00f https://demo.owasp-juice.shop/