Inventory, technologies, ports and services

Summary

The Asset Inventory lists every host the external scan discovered, with IP addresses, technologies and open ports. In this lesson you read it on the meccanicaadda.it scan: you learn to spot software and versions that need updating, filter hosts, explore the pages the scan reached and read a host's full details panel.

Chapters

Key points

• Where to find it: open the scan and choose the Asset Inventory tab. The Assets sub-tab shows one row per host.
• Host status: a green dot means the host responds, a red dot means it is inactive.
• Technologies and versions: the Technologies column shows what runs on each host, with the version when RECON recognises it. Old versions stand out: in the demo case the old host runs PHP 5.6 and WordPress 4.9, which need updating right away.
• Ports and HTTP response: the Ports column lists each open port with its service (for example 80 for HTTP and 443 for HTTPS); the Status column shows the HTTP response code.
• Filters and search: the filter offers All, Alive (only hosts that respond) and Inactive (hosts that no longer respond). With Search domains... you find a host straight away, for example vpn, which in the demo case exposes a FortiGate SSL-VPN: a service to keep up to date at all times.
• Sitemap: the Sitemap sub-tab shows the pages the scan reached while crawling the sites. The Tree view starts from the domain and branches by host and by section; each leaf is a public page. The Table view lists the same pages with URL Path, Status Code, Content Type and Depth, grouped by host, and you can filter them with Search URLs....
• Why it matters: every reachable address is a way in. Pages that answer 401 are restricted areas protected by authentication but visible from outside; login pages, old archives and restricted areas should be protected or removed.
• The host details panel: click a host to open it. Asset Topology gathers the connections of the selected host only (IP addresses, ports and technologies), not the map of the whole company. IP Addresses shows where the service answers; IP Geolocation describes the detected infrastructure and does not indicate the company's registered office.
• Ports and technologies in the panel: the ports table shows Port, Service and Product. Below it, Technologies lists the detected software with version (if known), category, a confidence percentage and the Detection Method. The percentage tells you how reliable the identification is, not how secure the software is.
• Technical evidence: TLS Fingerprint and HTTP Headers add detail. A header's Server field can reveal software and version: treat it as a clue to verify, not as definitive proof. Visit URL opens the host's address in a new tab.

Transcript

The full transcript of the video (in Italian) is available in the player's Transcript tab.

Related articles