Skip to content

Services

Browse all services and protocols. Each service contains attack phases with individual technique guides and cheatsheets.

Page 2 of 3
SNMP

SNMP

:161 :162
→

Network monitoring and management

snmp network udp monitoring linux enumeration
SMTP

SMTP

:25 :465 :587
→

Mail transfer service for sending emails.

smtp email network linux reconnaissance enumeration
AMQP

AMQP

:5671 :5672
→

Message broker protocol

amqp messaging broker network protocol
MSRPC

MSRPC

:135
→

Windows remote procedure calls

windows rpc network lateral-movement smb active-directory
IPP / CUPS

IPP / CUPS

:631
→

Network printing stack

ipp cups printing network linux service
Docker API

Docker API

:2375 :2376
→

No description available.

docker api containers linux remote-execution
Java RMI / JMX

Java RMI / JMX

:1099 :8686
→

Java remote management

java rmi jmx remote network
CGMS

CGMS

:3003
→

Custom or legacy management service

cgms management legacy custom service network
Rsync

Rsync

:873
→

File sync daemon

rsync file-transfer linux daemon network sync
IMAP

IMAP

:143 :993
→

Email access protocol syncing messages with server.

imap email network protocol authentication linux
POP3

POP3

:110 :995
→

Email retrieval protocol downloading messages locally.

Git daemon

Git daemon

:9418
→

Anonymous Git serving

git version-control anonymous-access tcp source-code
Elasticsearch

Elasticsearch

:9200 :9300
→

Search and analytics engine

web api linux database json http
NetBIOS

NetBIOS

:137 :138 :139
→

Windows legacy naming

netbios windows legacy smb network naming
r-services

r-services

:512 :513 :514
→

Legacy Unix remote login

rlogin unix remote-access legacy cleartext linux
RPCBind / Portmapper

RPCBind / Portmapper

:111
→

RPC service mapper

rpc portmapper linux network enumeration service-discovery
Jenkins

Jenkins

:8080 :8443
→

Jenkins is a CI/CD automation server. Attackers enumerate exposed dashboards, exploit script consoles for RCE, escalate privileges, move laterally via pipelines, and exfiltrate credentials or secrets

jenkins ci-cd web java rce automation
NTP

NTP

:123
→

Time synchronization service

ntp udp network time-sync reconnaissance
X11

X11

:6000 :6063
→

X11 is a display server protocol. Attackers probe open ports, check for auth bypass, capture keystrokes or screenshots, pivot via display access, and maintain persistence through xhost misconfigs

x11 linux display remote-access gui unix
Finger

Finger

:79
→

User information lookup service

finger linux unix enumeration reconnaissance network
TFTP

TFTP

:69
→

Simple file transfer service

tftp udp file-transfer network linux
IRC

IRC

:6667 :6697
→

IRC is a chat protocol. Attackers enumerate channels and users, exploit server flaws, use it as a C2 channel, exfiltrate data, and establish persistence via bots or backdoors

irc network chat protocol tcp reconnaissance
Grafana

Grafana

:3000
→

Grafana is an analytics dashboard platform. Attackers enumerate versions, exploit CVEs for RCE or auth bypass, steal credentials from data sources, and pivot via backend integrations

grafana web dashboard metrics http monitoring
Zabbix

Zabbix

:10050 :10051
→

Zabbix is a network monitoring platform. Attackers enum its web UI, exploit weak creds or CVEs, abuse agent configs, escalate via scripts, and pivot using stored host credentials

zabbix monitoring web snmp linux network