As part of a pentesting lab, my Kali is on a WAN and I have hosts behind a pfsense firewall. One of the steps is the list of open ports and services running on those ports. I am using nmap to do that (
nmap -sW -sV <hostip>) and I am able to get the actual open ports, but for some services, like SSH, MySQL(3306), they return
tcpwrapped for the service version.
I have read a lot regarding how to bypass this or how it actually works, but I still don´t know if I am actually able to bypass this and indeed get the service version. Can anybody help me with this?