# Enumeration

> Guides on host discovery, port scanning, OS fingerprinting, and NSE scans

- **URL:** https://hackindex.io/services/hosts/enumeration
- **Service:** [Hosts](https://hackindex.io/services/hosts.md)
- **Tags:** services, users, endpoints
- **Published:** 2025-12-28
- **Updated:** 2026-03-29

Host enumeration is active probing: scanning networks, discovering open ports, fingerprinting services, and identifying operating systems. This is where passive reconnaissance turns into a concrete target list.

Network scanning with Nmap and Masscan maps the attack surface. Service fingerprinting identifies what is running behind each port. OS detection narrows down exploit compatibility and post-exploitation paths.

The subpages cover scanning techniques, port discovery strategies, service identification, and OS fingerprinting methods.

## Guides

- [ICMP Host Discovery and Ping Sweeps](https://hackindex.io/services/hosts/enumeration/icmp-host-discovery-and-ping-sweeps.md)
- [Nmap Service Enumeration (NSE)](https://hackindex.io/services/hosts/enumeration/nmap-service-enumeration.md)
- [OS Fingerprinting and Banner Grabbing](https://hackindex.io/services/hosts/enumeration/os-fingerprinting-and-banner-grabbing.md)
- [Port Scanning with Nmap](https://hackindex.io/services/hosts/enumeration/port-scanning.md): Discover live hosts, open ports, and running services using Nmap's scan techniques, flags, and output formats for effective network enumeration.