Nmap Windows Server Enumeration Project

This project documents my first complete Windows Server enumeration exercise using Nmap and the Nmap Scripting Engine (NSE). The objective was to perform professional reconnaissance and service enumeration using a structured methodology rather than simply executing individual commands.

Project Overview

As someone transitioning into cybersecurity, I wanted practical experience that complements my certifications. This project demonstrates my ability to identify services, analyze network information and document findings professionally.

Why I Built This Lab

Practical experience is essential in cybersecurity. I created this home lab to gain hands-on experience using Nmap for reconnaissance and enumeration while learning how cybersecurity professionals assess enterprise systems.

Lab Environment

Methodology

  1. Identify the target system.
  2. Perform host discovery.
  3. Scan for open ports.
  4. Identify running services.
  5. Determine operating system information.
  6. Run Nmap NSE scripts.
  7. Document every finding.

Enumeration Results

The assessment successfully identified Windows services including:

Multiple NSE scripts were executed to enumerate services and gather additional host information. No significant vulnerabilities were identified within the lab environment.

Challenges

During testing, the Windows Server virtual machine received a different IP address which caused several scans to fail. After validating the environment and confirming connectivity, the enumeration completed successfully. This reinforced the importance of verifying the lab before assuming a security issue exists.

Key Lessons Learned

Project Screenshots

The screenshots below demonstrate the key stages of the enumeration process.

Looking Ahead

This project marks the beginning of my practical cybersecurity portfolio. My next objective is to expand my network monitoring skills through Wireshark packet analysis and SOC investigations.

Conclusion

Completing this project significantly improved my confidence in using Nmap, interpreting scan results and documenting technical findings. It represents an important milestone in my journey toward becoming a Junior SOC Analyst.

← Back to Portfolio