> For the complete documentation index, see [llms.txt](https://hacktricks.xsx.tw/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacktricks.xsx.tw/network-services-pentesting.md).

# Network Services Pentesting

- [Pentesting JDWP - Java Debug Wire Protocol](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-jdwp-java-debug-wire-protocol.md)
- [Pentesting SAP](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-sap.md)
- [Pentesting VoIP](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-voip.md)
- [Basic VoIP Protocols](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-voip/basic-voip-protocols.md)
- [SIP (Session Initiation Protocol)](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-voip/basic-voip-protocols/sip-session-initiation-protocol.md)
- [Pentesting Remote GdbServer](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-remote-gdbserver.md)
- [7/tcp/udp - Pentesting Echo](https://hacktricks.xsx.tw/network-services-pentesting/7-tcp-udp-pentesting-echo.md)
- [21 - Pentesting FTP](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-ftp.md)
- [FTP Bounce attack - Scan](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-ftp/ftp-bounce-attack.md)
- [FTP Bounce - Download 2ºFTP file](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-ftp/ftp-bounce-download-2oftp-file.md)
- [22 - Pentesting SSH/SFTP](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-ssh.md)
- [23 - Pentesting Telnet](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-telnet.md)
- [25,465,587 - Pentesting SMTP/s](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-smtp.md)
- [SMTP Smuggling](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-smtp/smtp-smuggling.md)
- [SMTP - Commands](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-smtp/smtp-commands.md)
- [43 - Pentesting WHOIS](https://hacktricks.xsx.tw/network-services-pentesting/43-pentesting-whois.md)
- [49 - Pentesting TACACS+](https://hacktricks.xsx.tw/network-services-pentesting/49-pentesting-tacacs+.md)
- [53 - Pentesting DNS](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-dns.md)
- [69/UDP TFTP/Bittorrent-tracker](https://hacktricks.xsx.tw/network-services-pentesting/69-udp-tftp.md)
- [79 - Pentesting Finger](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-finger.md)
- [80,443 - Pentesting Web Methodology](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web.md)
- [403 & 401 Bypasses](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/403-and-401-bypasses.md)
- [AEM - Adobe Experience Cloud](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/aem-adobe-experience-cloud.md)
- [Angular](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/angular.md)
- [Apache](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/apache.md)
- [Artifactory Hacking guide](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/artifactory-hacking-guide.md)
- [Bolt CMS](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/bolt-cms.md)
- [Buckets](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/buckets.md)
- [Firebase Database](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/buckets/firebase-database.md)
- [CGI](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/cgi.md)
- [DotNetNuke (DNN)](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/dotnetnuke-dnn.md)
- [Drupal](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/drupal.md)
- [Electron Desktop Apps](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/electron-desktop-apps.md)
- [Electron contextIsolation RCE via preload code](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-preload-code.md)
- [Electron contextIsolation RCE via Electron internal code](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-electron-internal-code.md)
- [Electron contextIsolation RCE via IPC](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/electron-desktop-apps/electron-contextisolation-rce-via-ipc.md)
- [Flask](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/flask.md)
- [NodeJS Express](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/nodejs-express.md)
- [Git](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/git.md)
- [Golang](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/golang.md)
- [GWT - Google Web Toolkit](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/gwt-google-web-toolkit.md)
- [Grafana](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/grafana.md)
- [GraphQL](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/graphql.md)
- [H2 - Java SQL database](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/h2-java-sql-database.md)
- [IIS - Internet Information Services](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/iis-internet-information-services.md)
- [ImageMagick Security](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/imagemagick-security.md)
- [JBOSS](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/jboss.md)
- [JIRA](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/jira.md)
- [Joomla](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/joomla.md)
- [JSP](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/jsp.md)
- [Laravel](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/laravel.md)
- [Moodle](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/moodle.md)
- [Nginx](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/nginx.md)
- [PHP Tricks](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp.md)
- [PHP - Useful Functions & disable\_functions/open\_basedir bypass](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass.md)
- [disable\_functions bypass - php-fpm/FastCGI](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-fpm-fastcgi.md)
- [disable\_functions bypass - dl function](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-dl-function.md)
- [disable\_functions bypass - PHP 7.0-7.4 (\*nix only)](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-7.0-7.4-nix-only.md)
- [disable\_functions bypass - Imagick <= 3.3.0 PHP >= 5.4 Exploit](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-imagick-less-than-3.3.0-php-greater-than-5.4-exploit.md)
- [disable\_functions - PHP 5.x Shellshock Exploit](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-php-5.x-shellshock-exploit.md)
- [disable\_functions - PHP 5.2.4 ionCube extension Exploit](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-php-5.2.4-ioncube-extension-exploit.md)
- [disable\_functions bypass - PHP <= 5.2.9 on windows](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-less-than-5.2.9-on-windows.md)
- [disable\_functions bypass - PHP 5.2.4 and 5.2.5 PHP cURL](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-5.2.4-and-5.2.5-php-curl.md)
- [disable\_functions bypass - PHP safe\_mode bypass via proc\_open() and custom environment Exploit](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-safe_mode-bypass-via-proc_open-and-custom-environment-exploit.md)
- [disable\_functions bypass - PHP Perl Extension Safe\_mode Bypass Exploit](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-perl-extension-safe_mode-bypass-exploit.md)
- [disable\_functions bypass - PHP 5.2.3 - Win32std ext Protections Bypass](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-5.2.3-win32std-ext-protections-bypass.md)
- [disable\_functions bypass - PHP 5.2 - FOpen Exploit](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-5.2-fopen-exploit.md)
- [disable\_functions bypass - via mem](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-via-mem.md)
- [disable\_functions bypass - mod\_cgi](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-mod_cgi.md)
- [disable\_functions bypass - PHP 4 >= 4.2.0, PHP 5 pcntl\_exec](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-useful-functions-disable_functions-open_basedir-bypass/disable_functions-bypass-php-4-greater-than-4.2.0-php-5-pcntl_exec.md)
- [PHP - RCE abusing object creation: new $\_GET\["a"\]($\_GET\["b"\])](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-rce-abusing-object-creation-new-usd_get-a-usd_get-b.md)
- [PHP SSRF](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/php-tricks-esp/php-ssrf.md)
- [Python](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/python.md)
- [Rocket Chat](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/rocket-chat.md)
- [Special HTTP headers](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/special-http-headers.md)
- [Source code Review / SAST Tools](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/code-review-tools.md)
- [Spring Actuators](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/spring-actuators.md)
- [Symfony](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/symphony.md)
- [Tomcat](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/tomcat.md)
- [Basic Tomcat Info](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/tomcat/basic-tomcat-info.md)
- [Uncovering CloudFlare](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/uncovering-cloudflare.md)
- [VMWare (ESX, VCenter...)](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/vmware-esx-vcenter....md)
- [WAF Bypass](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/waf-bypass.md)
- [Web API Pentesting](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/web-api-pentesting.md)
- [WebDav](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/put-method-webdav.md)
- [Werkzeug / Flask Debug](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/werkzeug.md)
- [Wordpress](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-web/wordpress.md)
- [88tcp/udp - Pentesting Kerberos](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-kerberos-88.md)
- [Harvesting tickets from Windows](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-kerberos-88/harvesting-tickets-from-windows.md)
- [Harvesting tickets from Linux](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-kerberos-88/harvesting-tickets-from-linux.md)
- [110,995 - Pentesting POP](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-pop.md)
- [111/TCP/UDP - Pentesting Portmapper](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-rpcbind.md)
- [113 - Pentesting Ident](https://hacktricks.xsx.tw/network-services-pentesting/113-pentesting-ident.md)
- [123/udp - Pentesting NTP](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-ntp.md)
- [135, 593 - Pentesting MSRPC](https://hacktricks.xsx.tw/network-services-pentesting/135-pentesting-msrpc.md)
- [137,138,139 - Pentesting NetBios](https://hacktricks.xsx.tw/network-services-pentesting/137-138-139-pentesting-netbios.md)
- [139,445 - Pentesting SMB](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-smb.md)
- [rpcclient enumeration](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-smb/rpcclient-enumeration.md)
- [143,993 - Pentesting IMAP](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-imap.md)
- [161,162,10161,10162/udp - Pentesting SNMP](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-snmp.md)
- [Cisco SNMP](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-snmp/cisco-snmp.md)
- [SNMP RCE](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-snmp/snmp-rce.md)
- [194,6667,6660-7000 - Pentesting IRC](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-irc.md)
- [264 - Pentesting Check Point FireWall-1](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-264-check-point-firewall-1.md)
- [389, 636, 3268, 3269 - Pentesting LDAP](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-ldap.md)
- [500/udp - Pentesting IPsec/IKE VPN](https://hacktricks.xsx.tw/network-services-pentesting/ipsec-ike-vpn-pentesting.md)
- [502 - Pentesting Modbus](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-modbus.md)
- [512 - Pentesting Rexec](https://hacktricks.xsx.tw/network-services-pentesting/512-pentesting-rexec.md)
- [513 - Pentesting Rlogin](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-rlogin.md)
- [514 - Pentesting Rsh](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-rsh.md)
- [515 - Pentesting Line Printer Daemon (LPD)](https://hacktricks.xsx.tw/network-services-pentesting/515-pentesting-line-printer-daemon-lpd.md)
- [548 - Pentesting Apple Filing Protocol (AFP)](https://hacktricks.xsx.tw/network-services-pentesting/584-pentesting-afp.md)
- [554,8554 - Pentesting RTSP](https://hacktricks.xsx.tw/network-services-pentesting/554-8554-pentesting-rtsp.md)
- [623/UDP/TCP - IPMI](https://hacktricks.xsx.tw/network-services-pentesting/623-udp-ipmi.md)
- [631 - Internet Printing Protocol(IPP)](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-631-internet-printing-protocol-ipp.md)
- [700 - Pentesting EPP](https://hacktricks.xsx.tw/network-services-pentesting/700-pentesting-epp.md)
- [873 - Pentesting Rsync](https://hacktricks.xsx.tw/network-services-pentesting/873-pentesting-rsync.md)
- [1026 - Pentesting Rusersd](https://hacktricks.xsx.tw/network-services-pentesting/1026-pentesting-rusersd.md)
- [1080 - Pentesting Socks](https://hacktricks.xsx.tw/network-services-pentesting/1080-pentesting-socks.md)
- [1098/1099/1050 - Pentesting Java RMI - RMI-IIOP](https://hacktricks.xsx.tw/network-services-pentesting/1099-pentesting-java-rmi.md)
- [1414 - Pentesting IBM MQ](https://hacktricks.xsx.tw/network-services-pentesting/1414-pentesting-ibmmq.md)
- [1433 - Pentesting MSSQL - Microsoft SQL Server](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-mssql-microsoft-sql-server.md)
- [Types of MSSQL Users](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-mssql-microsoft-sql-server/types-of-mssql-users.md)
- [1521,1522-1529 - Pentesting Oracle TNS Listener](https://hacktricks.xsx.tw/network-services-pentesting/1521-1522-1529-pentesting-oracle-listener.md)
- [1723 - Pentesting PPTP](https://hacktricks.xsx.tw/network-services-pentesting/1723-pentesting-pptp.md)
- [1883 - Pentesting MQTT (Mosquitto)](https://hacktricks.xsx.tw/network-services-pentesting/1883-pentesting-mqtt-mosquitto.md)
- [2049 - Pentesting NFS Service](https://hacktricks.xsx.tw/network-services-pentesting/nfs-service-pentesting.md)
- [2301,2381 - Pentesting Compaq/HP Insight Manager](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-compaq-hp-insight-manager.md)
- [2375, 2376 Pentesting Docker](https://hacktricks.xsx.tw/network-services-pentesting/2375-pentesting-docker.md)
- [3128 - Pentesting Squid](https://hacktricks.xsx.tw/network-services-pentesting/3128-pentesting-squid.md)
- [3260 - Pentesting ISCSI](https://hacktricks.xsx.tw/network-services-pentesting/3260-pentesting-iscsi.md)
- [3299 - Pentesting SAPRouter](https://hacktricks.xsx.tw/network-services-pentesting/3299-pentesting-saprouter.md)
- [3306 - Pentesting Mysql](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-mysql.md)
- [3389 - Pentesting RDP](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-rdp.md)
- [3632 - Pentesting distcc](https://hacktricks.xsx.tw/network-services-pentesting/3632-pentesting-distcc.md)
- [3690 - Pentesting Subversion (svn server)](https://hacktricks.xsx.tw/network-services-pentesting/3690-pentesting-subversion-svn-server.md)
- [3702/UDP - Pentesting WS-Discovery](https://hacktricks.xsx.tw/network-services-pentesting/3702-udp-pentesting-ws-discovery.md)
- [4369 - Pentesting Erlang Port Mapper Daemon (epmd)](https://hacktricks.xsx.tw/network-services-pentesting/4369-pentesting-erlang-port-mapper-daemon-epmd.md)
- [4786 - Cisco Smart Install](https://hacktricks.xsx.tw/network-services-pentesting/4786-cisco-smart-install.md)
- [4840 - OPC Unified Architecture](https://hacktricks.xsx.tw/network-services-pentesting/4840-pentesting-opc-ua.md)
- [5000 - Pentesting Docker Registry](https://hacktricks.xsx.tw/network-services-pentesting/5000-pentesting-docker-registry.md)
- [5353/UDP Multicast DNS (mDNS) and DNS-SD](https://hacktricks.xsx.tw/network-services-pentesting/5353-udp-multicast-dns-mdns.md)
- [5432,5433 - Pentesting Postgresql](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-postgresql.md)
- [5439 - Pentesting Redshift](https://hacktricks.xsx.tw/network-services-pentesting/5439-pentesting-redshift.md)
- [5555 - Android Debug Bridge](https://hacktricks.xsx.tw/network-services-pentesting/5555-android-debug-bridge.md)
- [5601 - Pentesting Kibana](https://hacktricks.xsx.tw/network-services-pentesting/5601-pentesting-kibana.md)
- [5671,5672 - Pentesting AMQP](https://hacktricks.xsx.tw/network-services-pentesting/5671-5672-pentesting-amqp.md)
- [5800,5801,5900,5901 - Pentesting VNC](https://hacktricks.xsx.tw/network-services-pentesting/pentesting-vnc.md)
- [5984,6984 - Pentesting CouchDB](https://hacktricks.xsx.tw/network-services-pentesting/5984-pentesting-couchdb.md)
- [5985,5986 - Pentesting WinRM](https://hacktricks.xsx.tw/network-services-pentesting/5985-5986-pentesting-winrm.md)
- [5985,5986 - Pentesting OMI](https://hacktricks.xsx.tw/network-services-pentesting/5985-5986-pentesting-omi.md)
- [6000 - Pentesting X11](https://hacktricks.xsx.tw/network-services-pentesting/6000-pentesting-x11.md)
- [6379 - Pentesting Redis](https://hacktricks.xsx.tw/network-services-pentesting/6379-pentesting-redis.md)
- [8009 - Pentesting Apache JServ Protocol (AJP)](https://hacktricks.xsx.tw/network-services-pentesting/8009-pentesting-apache-jserv-protocol-ajp.md)
- [8086 - Pentesting InfluxDB](https://hacktricks.xsx.tw/network-services-pentesting/8086-pentesting-influxdb.md)
- [8089 - Pentesting Splunkd](https://hacktricks.xsx.tw/network-services-pentesting/8089-splunkd.md)
- [8333,18333,38333,18444 - Pentesting Bitcoin](https://hacktricks.xsx.tw/network-services-pentesting/8333-18333-38333-18444-pentesting-bitcoin.md)
- [9000 - Pentesting FastCGI](https://hacktricks.xsx.tw/network-services-pentesting/9000-pentesting-fastcgi.md)
- [9001 - Pentesting HSQLDB](https://hacktricks.xsx.tw/network-services-pentesting/9001-pentesting-hsqldb.md)
- [9042/9160 - Pentesting Cassandra](https://hacktricks.xsx.tw/network-services-pentesting/cassandra.md)
- [9100 - Pentesting Raw Printing (JetDirect, AppSocket, PDL-datastream)](https://hacktricks.xsx.tw/network-services-pentesting/9100-pjl.md)
- [9200 - Pentesting Elasticsearch](https://hacktricks.xsx.tw/network-services-pentesting/9200-pentesting-elasticsearch.md)
- [10000 - Pentesting Network Data Management Protocol (ndmp)](https://hacktricks.xsx.tw/network-services-pentesting/10000-network-data-management-protocol-ndmp.md)
- [11211 - Pentesting Memcache](https://hacktricks.xsx.tw/network-services-pentesting/11211-memcache.md)
- [Memcache Commands](https://hacktricks.xsx.tw/network-services-pentesting/11211-memcache/memcache-commands.md)
- [15672 - Pentesting RabbitMQ Management](https://hacktricks.xsx.tw/network-services-pentesting/15672-pentesting-rabbitmq-management.md)
- [24007,24008,24009,49152 - Pentesting GlusterFS](https://hacktricks.xsx.tw/network-services-pentesting/24007-24008-24009-49152-pentesting-glusterfs.md)
- [27017,27018 - Pentesting MongoDB](https://hacktricks.xsx.tw/network-services-pentesting/27017-27018-mongodb.md)
- [44134 - Pentesting Tiller (Helm)](https://hacktricks.xsx.tw/network-services-pentesting/44134-pentesting-tiller-helm.md)
- [44818/UDP/TCP - Pentesting EthernetIP](https://hacktricks.xsx.tw/network-services-pentesting/44818-ethernetip.md)
- [47808/udp - Pentesting BACNet](https://hacktricks.xsx.tw/network-services-pentesting/47808-udp-bacnet.md)
- [50030,50060,50070,50075,50090 - Pentesting Hadoop](https://hacktricks.xsx.tw/network-services-pentesting/50030-50060-50070-50075-50090-pentesting-hadoop.md)