Enumeration

NTP enumeration identifies time servers and extracts configuration details through protocol queries. Version detection reveals the NTP daemon and its release, which determines available features and known vulnerabilities.

The monlist command (mode 7) on older ntpd versions returns a list of recent clients, exposing internal hosts that query the server. Peer listing shows upstream time sources and network topology. These queries run unauthenticated and reveal infrastructure details useful for further reconnaissance.