Configure and Test Network Services for Security Labs

This skill configures and tests common network services - HTTP, HTTPS, SNMP, and SMB - inside a penetration testing lab environment, so a learner can practice service enumeration, log analysis, and security testing against properly configured target systems. It walks through setting up an HTTP server on port 80 (IIS on Windows, Apache on Linux), an HTTPS server on port 443 with a self-signed certificate, an SNMP service on port 161 with configurable community strings, and SMB file shares on port 445 with various permission levels. For each service it also gives the matching enumeration commands - snmpwalk, snmp-check, onesixtyone, smbclient, smbmap, enum4linux, and targeted nmap scripts - plus how to review the resulting HTTP/HTTPS access and error logs, including a POST-request and user-agent parsing example for credential analysis.

The skill carries a mandatory confirmation gate: before any command that probes, changes, or extracts data from a target, it requires the user to state the exact target, confirm written authorization and scope, and explicitly confirm before proceeding - otherwise it stays read-only and gives defensive guidance only.

Use it in an isolated lab or disposable VM to stand up realistic, intentionally practice-configured services for enumeration and security-testing practice. Do NOT use it against any system without explicit, written authorization from the system owner and a confirmed, defined scope - the skill itself gates on this before executing anything beyond read-only guidance, and its own constraints note that lab environments should be isolated from production.

Inputs: a Windows Server or Linux host to run the services, a Kali Linux (or similar) box for testing, administrative access to the target, basic networking knowledge, and firewall access to open the needed ports. Outputs: a configured HTTP/HTTPS web server, an SNMP service with accessible communities, SMB shares at varying permission levels, captured service logs, and documented enumeration results.

sudo apt update && sudo apt install apache2
sudo systemctl start apache2
sudo systemctl enable apache2

The workflow relies on standard networking and pentest tooling: Apache/IIS for HTTP(S), snmpd/SNMP for enumeration practice, Samba for SMB shares, and enumeration tools including nmap, nikto, gobuster, enum4linux, and smbclient. Firewall configuration is covered for both ufw (Linux) and Windows Firewall (New-NetFirewallRule).

Security learners and penetration testers who need a controlled, properly authorized lab to practice service enumeration and log analysis against HTTP, HTTPS, SNMP, and SMB - not for use against any system without explicit written permission.