Note: Date is incorrect. I THINK I’ve already converted this into another document (taking notes during a pentest?). Check that. Discovering hosts on an internal network is one of the first things you’ll do as part of a penetration test, assuming all the initial formalities have been completed. I’m going to go through a few techniques for discovering hosts using Nmap, and crucially — how to organize the data that comes back from these scans. ...