Identify service versions
CompletedWhat you are learning
Use lightweight Nmap service detection on the same small fixed port set to gather software and version clues.
- Identify services associated with exposed TCP ports on an authorized target.
- Distinguish a general service type from a specific service implementation or version.
- Record service-identification evidence without overstating conclusions beyond what the observation supports.
Knowing that a port is open provides only limited context. Identifying the software behind that port gives defenders more actionable information for vulnerability management, patch prioritization, exposure reviews, and monitoring. Accurate service identification also helps reduce false assumptions about what is actually running.
Follow the exercise instructions provided by the trainer for this lesson.
Authorized reconnaissance action
Commands, flags, ports, and targets are fixed by the trainer. The participant cannot enter arbitrary shell commands.
Enter one finding per line. Identity and condition are locked by the facilitator.
Version strings help form patching and exposure hypotheses, but banners may be missing, proxied, stale, or intentionally misleading.
Service-detection probes can create distinctive connection patterns and application errors visible in IDS, firewall, reverse-proxy, and host logs.