As part of a pentesting lab, my Kali is on a WAN and I have hosts behind a pfsense firewall. One of the steps is the list of open ports and services running on those ports. I am using nmap to do that (nmap -sW -sV <hostip>) and I am able to get the actual open ports, but for some services, like SSH, MySQL(3306), they return tcpwrapped for the service version.

I have read a lot regarding how to bypass this or how it actually works, but I still donĀ“t know if I am actually able to bypass this and indeed get the service version. Can anybody help me with this?

Browse other questions tagged or ask your own question.