DHCP (Dynamic Host Configuration Protocol) Pentesting DHCP uses UDP. Port 67 is for a server, port 68 is for a client. Enumeration nmap -sU --script broadcast-dhcp-discover -p 67,68 <target-ip>