Configure and Test Network Services for Security Labs

Configures and tests common network services - HTTP, HTTPS, SNMP, and SMB - in penetration testing lab environments, enabling hands-on practice with service enumeration, log analysis, and security testing against properly configured target systems.

Use this skill when building an isolated pentesting lab that needs realistic HTTP/HTTPS, SNMP, or SMB targets for enumeration practice, or when analyzing service logs for security training. Requires administrative access to a target Windows Server or Linux system, a Kali Linux (or similar) testing machine, and firewall access. Lab environments should be isolated from production - not a fit for configuring these services for real production use, or for testing systems without authorization.

Covers HTTP server setup (port 80) via Windows IIS or Linux Apache, including firewall rules (UFW or Windows Firewall PowerShell commands) and verification via curl. HTTPS setup (port 443) covers generating a self-signed certificate with openssl, enabling Apache's SSL module, and verifying with nmap, openssl s_client, and curl -kv.

SNMP setup (port 161) covers installing snmpd, configuring rocommunity/rwcommunity strings in snmpd.conf, and enumeration with snmpwalk (system info OID 1.3.6.1.2.1.1, running processes OID 1.3.6.1.2.1.25.4.2.1.2), snmp-check, and brute-forcing community strings with onesixtyone against a SecLists wordlist. SMB setup (port 445) covers Samba installation, share configuration in smb.conf (browsable, guest access), and enumeration with smbclient -L, smbmap, enum4linux -a, and nmap --script smb-vuln*.

Log analysis covers Apache access/error logs and IIS log locations, with grep/awk patterns for extracting POST requests and user agents. Provides a quick-reference port table (HTTP 80, HTTPS 443, SNMP 161/UDP, SMB 445, NetBIOS 137-139) and common enumeration tools (nmap, nikto, snmpwalk, enum4linux, smbclient, gobuster). Lists constraints (self-signed certs trigger browser warnings, SNMP v1/v2c is cleartext, anonymous SMB is often disabled by default) and a troubleshooting table covering port accessibility, service startup, SNMP timeouts, SMB access denial, and HTTPS certificate errors.

Includes three complete worked examples: an HTTP lab with a login form for credential-capture practice, a quick SNMP configuration with a public community string, and an anonymous SMB share setup.

Uses Apache/IIS for HTTP/HTTPS, snmpd for SNMP, Samba for SMB, and enumeration tooling including nmap, nikto, snmpwalk, snmp-check, onesixtyone, smbclient, smbmap, enum4linux, and gobuster.

Security trainers and learners building an isolated pentesting lab who need concrete service configuration steps and matching enumeration commands for HTTP, HTTPS, SNMP, and SMB targets.

snmpwalk -c public -v1 192.168.1.1