Service Fingerprinting

Overview

Service fingerprinting identifies the specific software, version, and configuration of network services. Accurate fingerprinting enables targeted vulnerability assessment, exploit selection, and understanding of the attack surface. This skill combines active probing, banner grabbing, and behavioral analysis.

Core principle: Start passive, escalate to active when needed. Combine multiple techniques for accuracy.

When to Use

• After discovering live hosts (from subdomain enumeration)
• Before vulnerability scanning or exploitation
• When building detailed target intelligence
• During penetration testing reconnaissance phase

Techniques

Port Scanning