Playbook

Host discovery

nmap -sn

Port scan

nmap -sS -sV -sC

Check service manually

nc curl http://:

Identify process locally

lsof -i :