nmap, telnet, hydra

  1. Open port highest but less than 10,000 nmap -p1-10000 [IP] answer: nmap -p1-10000 10.10.91.5

  2. Port outside of 1000 ports, above 10000 nmap -sT -p1-65535 [IP] -v answer: nmap -sT -p1-65535 10.10.91.5 -v

  3. TCP ports open count tcp ports

  4. HTTP Server Header telnet [IP] 80

  5. SSH Server Header telnet [IP] 22