domains / families / security / port-service-discovery

port-service-discovery

separate

Nmap scan for MySQL, Redis, FTP, SSH, internal API services.

When to use

• Running `deep-invade` Phase 6 on a high-value target.
• After surface recon shows no exploitable web vulnerabilities — pivot to infrastructure.
• When the target is a SaaS with backend APIs on non-standard ports.
• After discovering a staging subdomain — check for database/admin ports.

When not to use

• validating service identity
• validating unauthorized access

Skill page

Source