Xuts Labs

Operator Flow

Selected Node

Start Enumeration

enumreconstart

Start with a repeatable target baseline: identify all open ports, services, versions, hostnames, domains, and anything that changes the attack path.

Most failed boxes are not failed exploitation attempts. They are missed enumeration. This node forces a full service map before chasing rabbit holes.

Fast full TCP scan

sudo nmap -p- --min-rate 5000 -Pn TARGET -oN scans/nmap-full.txt

Finds all open TCP ports quickly.

Version and script scan

sudo nmap -sCV -p PORTS TARGET -oN scans/nmap-services.txt

Runs default scripts and version detection against discovered ports.

UDP top ports

sudo nmap -sU --top-ports 100 -Pn TARGET -oN scans/nmap-udp-top100.txt

Checks common UDP exposure without scanning the entire UDP range.

Create notes folders

mkdir -p scans loot screenshots shells notes

Keeps evidence organized from the start.