Configure and test common network services (HTTP, HTTPS, SNMP, SMB) for penetration testing lab environments. Enable hands-on practice with service enumeration, log analysis, and security testing against properly configured target systems.

⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited. Mandatory confirmation gate Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target: 1. Ask the user to state the exact target URL, IP, account, or resource. 2. Ask the user to confirm written authorization and the permitted scope. 3. Show the exact command(s) and explain their expected effect. 4. Wait for explicit confirmation in the current conversation. Without that confirmation, remain read only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab. Network 101 Purpose Configure and test common network services (HTTP, HTTPS, SNMP, SMB) for penetration testing lab environments. Enable hands on practice with service enumeration, log analysis, and security testing against properly configured target systems. Inputs/Prerequisites Windows Server or Linux system for hosting services Kali Linux or similar for testing Administrative access to target system Basic networking knowledge (IP addressing, ports) Firewall access for port configuration Outputs/Deliverables Configured HTTP/HTTPS web server SNMP service with accessible communities SMB file shares with various permission levels Captured logs for analysis Documented enumeration results Core Workflow 1. Configure HTTP Server (Port 80) Set up a basic HTTP web server for testing: Windows IIS Setup: 1. Open IIS Manager (Internet Information Services) 2. Right click Sites → Add Website 3. Configure site name and physical path 4. Bind to IP address and port 80 Linux Apache Setup: Configure Firewall for HTTP: 2. Configure HTTPS Server (Port 443) Set up secure HTTPS with SSL/TLS: Generate Self Signed Certificate: Configure Apache for HTTPS: Verify HTTPS Setup: 3. Configure SNMP Service (Port 161) Set up SNMP for enumeration practice: Linux SNMP Setup: Windows SNMP Setup: 1. Open Server Manager → Add Features 2. Select SNMP Service 3. Configure community strings in Services → SNMP Service → Properties SNMP Enumeration Commands: 4. Configure SMB Service (Port 445) Set up SMB file shares for enumeration: Windows SMB Share: 1. Create folder to share 2. Right click → Properties → Sharing → Advanced Sharing 3. Enable sharing and set permissions 4. Configure NTFS permissions Linux Samba Setup: SMB Enumeration Commands: 5. Analyze Service Logs Review logs for security analysis: HTTP/HTTPS Logs: Parse Log for Credentials: Quick Reference Essential Ports Service Port Protocol HTTP 80 TCP HTTPS 443 TCP SNMP 161 UDP SMB 445 TCP NetBIOS 137 139 TCP/UDP Service Verification Commands Common Enumeration Tools Tool Purpose nmap Port scanning and scripts nikto Web vulnerability scanning snmpwalk SNMP enumeration enum4linux SMB/NetBIOS enumeration smbclient SMB connection gobuster Directory brute forcing Constraints Self signed certificates trigger browser warnings SNMP v1/v2c communities transmit in cleartext Anonymous SMB access is often disabled by default Firewall rules must allow inbound connections Lab environments should be isolated from production Examples Example 1: Complete HTTP Lab Setup Example 2: SNMP Testing Setup Example 3: SMB Anonymous Access Troubleshooting Issue Solution Port not accessible Check firewall rules (ufw, iptables, Windows Firewall) Service not starting Check logs with journalctl u service name SNMP timeout Verify UDP 161 is open, check community string SMB access denied Verify share permissions and user credentials HTTPS certificate error Accept self signed cert or add to trusted store Cannot connect remotely Bind service to 0.0.0.0 instead of localhost When to Use This skill is applicable to execute the workflow or actions described in the overview.

network-101