Services
Browse all services and protocols. Each service contains attack phases with individual technique guides and cheatsheets.
SNMP
Network monitoring and management
SMTP
Mail transfer service for sending emails.
AMQP
Message broker protocol
MSRPC
Windows remote procedure calls
IPP / CUPS
Network printing stack
Docker API
Java RMI / JMX
Java remote management
CGMS
Custom or legacy management service
Rsync
File sync daemon
IMAP
Email access protocol syncing messages with server.
POP3
Email retrieval protocol downloading messages locally.
Git daemon
Anonymous Git serving
Elasticsearch
Search and analytics engine
NetBIOS
Windows legacy naming
r-services
Legacy Unix remote login
RPCBind / Portmapper
RPC service mapper
Jenkins
Jenkins is a CI/CD automation server. Attackers enumerate exposed dashboards, exploit script consoles for RCE, escalate privileges, move laterally via pipelines, and exfiltrate credentials or secrets
NTP
Time synchronization service
X11
X11 is a display server protocol. Attackers probe open ports, check for auth bypass, capture keystrokes or screenshots, pivot via display access, and maintain persistence through xhost misconfigs
Finger
User information lookup service
TFTP
Simple file transfer service
IRC
IRC is a chat protocol. Attackers enumerate channels and users, exploit server flaws, use it as a C2 channel, exfiltrate data, and establish persistence via bots or backdoors
Grafana
Grafana is an analytics dashboard platform. Attackers enumerate versions, exploit CVEs for RCE or auth bypass, steal credentials from data sources, and pivot via backend integrations
Zabbix
Zabbix is a network monitoring platform. Attackers enum its web UI, exploit weak creds or CVEs, abuse agent configs, escalate via scripts, and pivot using stored host credentials