Tagged Questions

-1
votes
1answer
112 views

How to find IP Addresses that have been attacking my Computer Ports ?

I am a newbie at Info Sec, and wanted to know which IP addresses are sources of attack traffic. Can I also find out which ports are being attacked? Can this information be found in windows firewall? ...
2
votes
0answers
44 views

Could you attack a port without knowing what service was listening? [duplicate]

A lot of discussion I see suggests that changing default ports for services is just "security by obscurity" and is easily defeated by scanning for open ports. My question is this, though, if the ...
2
votes
3answers
297 views

Is it really better to use port 80 or 443 for outgoing traffic in order to bypass user firewall?

I recently created a reverse connection shell in C#. I tested it with some computers and I noticed that some computers connected back correctly and I established connection with them but another ...
0
votes
0answers
118 views

Tool too scan open ports on a firewall [closed]

How can we check which ports are open on a firewall that use header flags? Any free tool that sends packets to the host to map these ports?
5
votes
2answers
233 views

How should an outgoing connection white-list be created?

I see my previous question was closed as duplicate of Why block outgoing network traffic with a firewall?. The answers that everyone agree with mention the value of blocking outgoing connections (to ...
0
votes
0answers
22 views

Security value of restricting ports for outgoing connections [duplicate]

Possible Duplicate: Why block outgoing network traffic with a firewall? Please provide a clear explanation of what the value would be for this? If you have set up a firewall that blocks all ...
3
votes
2answers
322 views

If a port is closed how come you can still use it?

What does it actually mean for a port to be closed or stealthed? According to tests I've run all my ports (tested) are stealthed but clearly I can still use the internet. Also are the terms "blocked" ...
0
votes
2answers
158 views

can a backdoor executable be used on an occupied port?

Suppose I am doing a penetration test on a network that has a firewall that blocks all ports except 80, 110, and 443. I want to use a metasploit reverse-TCP backdoor executable written in msfpayload ...
1
vote
2answers
479 views

How to check if a port can be accessed from the outside

I want to be sure that the firewall protecting the intranet is effectively rejecting/granting access to a port. I have no access to the firewall nor any other external machine. Is that possible at ...
7
votes
2answers
715 views

ports blocked by firewall and not the server

I was asked this question at an interview and i wasn't sure about the answer. The question was "suppose you were checking the open ports on a particular webserver which was behind a firewall, how ...
10
votes
4answers
2k views

Dangers of opening up a wide range of ports? (mosh)

Why do we generally configure firewalls to filter out all traffic that we don't specifically allow? Is this just an extra layer of security for defense-in-depth that buys us nothing if we are not ...
3
votes
3answers
780 views

Which of these ports are safe to leave open, which are not?

I just ran nMap against my IP address and got the following result: PORT STATE SERVICE 21/tcp open ftp 22/tcp open ssh 23/tcp open telnet 80/tcp open http 443/tcp open https ...
2
votes
1answer
606 views

Is opening both TCP/UDP less secured than just TCP or UDP when needed and why?

If application needs opened port X UDP, or X TCP combination. Is there any potential risk by opening both UDP/TCP as I usually am not sure which one the application uses?
7
votes
3answers
3k views

How to listen to all ports (UDP and TCP) or make them all appear open (linux)

I got an external Debian server. The problem is that my university campus doesn't allow connections to go outside when the port is different than TCP port 22, 80, 443, or UDP port 123. I tested them ...