> For the complete documentation index, see [llms.txt](https://h4ck0.gitbook.io/h4ck0-blog/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://h4ck0.gitbook.io/h4ck0-blog/linux-os/services-enumeration-commands.md).

# Services Enumeration Commands

My most common enum commands when or priv escalating or lateral movement on a Linux box

### **plications & Services**

#### **What services are running? *****Which service has which user privilege?***

<table><thead><tr><th width="251">Commands</th></tr></thead><tbody><tr><td>ps aux</td></tr><tr><td>ps -ef</td></tr><tr><td>top</td></tr><tr><td>cat /etc/services</td></tr></tbody></table>

#### **Which service(s) are been running by&#x20;*****root? Of these services, which are vulnerable - it's worth a double check!***

<table><thead><tr><th width="251">Commands</th></tr></thead><tbody><tr><td>ps aux | grep root</td></tr><tr><td>ps -ef | grep root</td></tr><tr><td></td></tr></tbody></table>

#### **What applications are installed?&#x20;*****What version are they? Are they currently running?***

<table><thead><tr><th width="251">Commands</th></tr></thead><tbody><tr><td>ls -alh /usr/bin/</td></tr><tr><td>ls -alh /sbin/</td></tr><tr><td>dpkg -l</td></tr><tr><td>ls -alh /var/cache/apt/archivesO </td></tr><tr><td>ls -alh /var/cache/yum/</td></tr></tbody></table>

#### **Any of the service(s) settings misconfigured?&#x20;*****Are any (vulnerable) plugins attached?***

<table><thead><tr><th width="526">Commands</th></tr></thead><tbody><tr><td>cat /etc/syslog.conf</td></tr><tr><td>cat /etc/chttp.conf   </td></tr><tr><td>cat /etc/lighttpd.conf </td></tr><tr><td>cat /etc/cups/cupsd.conf</td></tr><tr><td>cat /etc/inetd.conf</td></tr><tr><td> cat /etc/apache2/apache2.conf</td></tr><tr><td>cat /etc/my.conf</td></tr><tr><td> cat /etc/httpd/conf/httpd.conf </td></tr><tr><td>cat /opt/lampp/etc/httpd.conf ls -aRl /etc/ | awk '$1 ~ /^.<em>r.</em>/</td></tr></tbody></table>