Discovering open ports and applications by pinging

machines

Blueprinting the security profile of an organization

Finding company information on the Web

Authenticating to the target with the highest level of

access and permissions possible