Re-enumerate From the Internal Machine
enumerationchecklist
Summary
Ports invisible externally may expose vulnerable internal web apps once you are on the box.
Walkthrough
After getting a foothold, re-run enumeration from inside the host — internal-only services are often the real path forward.