Which of the following tasks is NOT performed into the enumeration phase?

The enumeration phase of a penetration test involves actively connecting to target systems to gather detailed information, such as user accounts, network shares, and running services. Its purpose is to identify potential attack vectors. Discovering NetBIOS names (A), querying Active Directory (B), and using NULL sessions (D) are all classic enumeration techniques aimed at information gathering. In contrast, injecting a backdoor (C) is an act of exploitation and post-exploitation. This action occurs after the enumeration phase, once a vulnerability has been identified and used to gain initial access, with the goal of establishing persistent control over the compromised system.

A. Discovering NetBIOS names is a fundamental enumeration technique used to identify and map systems within a Windows-based network environment.
B. Obtaining Active Directory information is a core enumeration activity in enterprise environments to identify users, groups, and potential privilege escalation paths.
D. Establishing NULL sessions is a well-known, albeit older, enumeration method to anonymously query a Windows system for information like users and shares.

1. The Penetration Testing Execution Standard (PTES). The standard defines a clear separation between phases. Enumeration is covered under the "Intelligence Gathering" section

which focuses on identifying information. Injecting a backdoor falls under the "Post-Exploitation" phase

which is concerned with maintaining access after a successful compromise.

Reference: The Penetration Testing Execution Standard

"Post-Exploitation

" Section 1. Available at: http://www.pentest-standard.org/index.php/Post-Exploitation

2. Academic Publication. Research on penetration testing methodologies consistently places enumeration as a pre-exploitation

information-gathering step. The goal is to find vulnerabilities

not to execute payloads or establish persistence.

Reference: Al-Ani

A. (2011). A Study on Penetration Testing Process and Tools. International Journal of Computer Science and Security (IJCSS)

Volume (5)

Issue (1)

pp. 81-82. The paper outlines the phases as: Reconnaissance

Scanning

Enumeration

Gaining Access

and Maintaining Access

clearly separating enumeration from the act of gaining and maintaining access (e.g.

with a backdoor).

3. University Courseware. Curricula on ethical hacking and penetration testing from reputable institutions teach a phased approach where enumeration precedes exploitation.

Reference: University of Central Florida

Course CIS 4615

"Secure Software Development and Assurance

" Lecture on "Penetration Testing." The lecture slides outline the phases of a penetration test

defining enumeration as gathering information like usernames and hostnames

while exploitation involves gaining access and post-exploitation involves installing backdoors.