Network Enumeration

basic:

ifconfig

sometimes doesn’t work and need:

ip a

dual homed (running 2 IP/nicks)

route

useful to see multiple routes kinda like multiple nicks communicating with different stuff

arp tables help us know who we are communicating with:

arp -a

new command:

ip neigh

netstat like windows to see ports internally accessible but not to the outside:

netstat -ano

intercept traffic or exploit a specific thing running on one of the ports

example:

• 127.0.0.1:961

That’s a port open to only localhost. What is it doing locally on UDP?