2KKUU7ita

204
Part IV: Hacking Operating Systems
Figure 11-1:
Port scanning
a
Windows 7
system with
NetScan
Tools Pro.
2. Perform OS enumeration (such as scanning for shares and specific OS
versions) by using an all-in-one assessment tool, such as LanGuard.
Figure 11-2 shows a LanGuard scan that reveals the server version,
vulnerabilities, open ports, and more.
If you need to quickly identify the specific version of Windows that’s
running, you can use Nmap (http://nmap.org/download.html) with
the -O option, as shown in Figure 11-3.
Other OS fingerprinting tools are available, but I’ve found Nmap to be
one of the most accurate.
3. Determine potential security vulnerabilities.
This is subjective and might vary from system to system, but what you
want to look for are interesting services and applications and proceed
from there.