In computer networking a port is a software construct serving as a communications endpoint in a computer's host OS.

learn more… | top users | synonyms

2
votes
1answer
226 views

What do Msgsrvr and Scientia-ssdb do?

I'm having a task in a computer security class in school where I'm supposed to scan a host for open ports in order to find out what services are being run there. I have found out (among other things) ...
1
vote
1answer
660 views

Does connection that use 0.0.0.0 in Foreign Address secured?

When I run my application on Centos the specific process opens port that listens for connections from localhost, but uses 0.0.0.0 in Foreign Address. Is it secured? netstat -plunt Active Internet ...
1
vote
1answer
468 views

Can closing port 80 lead to more security?

If a website is running on HTTPS only, is it reasonable to close port 80 of the web server and only leave port 443 open? Does this action provide more security for the website?
1
vote
3answers
2k views

Why P2P need portforwarding when behind NAT? [closed]

Correct me if I'm wrong, but for a node to participate in peer-to-peer, if it's behind a NAT, it most port forward to be able to connect. Why is the port forwarding necessary? I know there's ...
0
votes
1answer
593 views

Netgear WNDR4000 open port 53

Why is port 53 open on the WAN side of the router? And more importantly how do I close it? Port 53 is not one of my forwarded ports. Discovered by doing nmap -pT:1-64 <my-external-IP> -Pn ...
-2
votes
2answers
2k views

Port list according to vulnerability [closed]

I'm looking for a list of ports sorted according to the number of vulnerability you can find for that specific port (considering of course, the service installed in the default port). Example: ...
2
votes
3answers
908 views

Why block network ports?

There was another good question here on why you should block outgoing traffic: Why block outgoing network traffic with a firewall? But I was hoping to get an answer on why it is a good idea to block ...
3
votes
5answers
2k views

Nmap reporting almost every port as open

I have noticed during some assesments when doing a TCP port scan, Nmap will report almost every port as open for a machine. Using for example nmap -sS -PN -T4 target -p0-65535, over 20,000 ports will ...
0
votes
1answer
228 views

Is it possible to scan a remote host in another network if I know a port that is opened?

First of all, this question is not the same as is it possible to test out remote host by using nmap?, because on that question, the questioner is asking for something impossible due to NAT's nature. ...
0
votes
2answers
3k views

Is Port Forwarding for bit torrent risky?

I have found that my connection decreased suddenly when downloading torrents. I diagnosed it with bit torrent and the answer is that i should do port forwarding on my modem/router! Is it risky?
1
vote
1answer
123 views

Hardening Services, Ports on OSX

People boast about OSX Security, yet I find it very hard to find a comprehensive manual in regards to any equivalent Services and the ports they use. I am aware of lanchd and launchctl and Lingon is ...
0
votes
1answer
131 views

Understanding a Zenmap output

I'm running Zenmap on my Windows 7 laptop. I ran an intense scan with UDP targeting my router 192.168.1.1.I realize that I'm probing into the back end of the router from the inside and that any open ...
0
votes
1answer
194 views

Open ports on mac. Safe?

My friend is currently running the default firewall on his mac with "Block all incoming connection" (except the basic ones like 80). I just scanned his mac for open ports and I found the following: ...
2
votes
2answers
172 views

Hide logging server from DMZ

I have a server on my DMZ whichs relays syslog and OcsInventory messages to a server on a vlan for logging servers. In order to allow the packets to go through I must allow port 80 (OcsInventory) and ...
0
votes
1answer
102 views

Security risks monitoring JMX

I am doing an internship at a big company wich create industrial automated systems for some big company's. They want me to design a way to monitor all the Java based control modules. Now I am going to ...
0
votes
2answers
86 views

Can I communicate with a wireless device, without logging in the same LAN?

Suppose there are three devices: WPA2 protected AP linux laptop, accessing internet through tha AP linux laptop, not connected to the AP I own the third device and do not know the AP's password. I ...
1
vote
4answers
2k views

How to make nmap list an unfiltered port?

I have a host that is NAT'ed and I have opened a single port in my router so the host is reachable by the external world. I tested if it was reachable by running a service and connecting to it ...
0
votes
1answer
861 views

In-office Flask app on port 80 - is it safe? [closed]

The title says it all; I'm just serving data to coworkers as a courtesy via a series of single-page apps that I basically consolidated under Flask, serving Jinja templates. Presently, I have Apache ...
8
votes
2answers
12k views

What are the security implications of enabling UPnP in my home router?

I found port forwarding entries in home router that I haven't manually configured. Is that because of UPnP? Are applications simply able to tell the router to forward ports on their own? Are there ...
-6
votes
3answers
202 views

What are ports? [closed]

I just wanted to know what are ports. Can someone explain to me what a port is?
7
votes
1answer
460 views

different portscan tools give different results

I have different results as of my open TCP ports. When using nmap -sS 127.0.0.1, I get some 5 usual open ports, but when using osx built-in tool as stroke, I get those 5 ports plus 5 extra ports. How ...
2
votes
1answer
905 views

Why are some ports reported as closed by nmap?

I was scanning a machine from inside the same LAN which is running and up to date Windows XP Home Edition which I suspect may be running some malware. The target machine has an up to date antivirus ...
0
votes
2answers
766 views

Vulnerability of the open port

I'm installing service on the cloud machine and I was wondering on port vulnerabilities for my customers. My service which lives on server A (often on a customer site) needs to access server B ...
-1
votes
1answer
1k views

How to find IP Addresses that have been attacking my Computer Ports ? [closed]

I am a newbie at Info Sec, and wanted to know which IP addresses are sources of attack traffic. Can I also find out which ports are being attacked? Can this information be found in windows firewall? ...
2
votes
0answers
51 views

Could you attack a port without knowing what service was listening? [duplicate]

A lot of discussion I see suggests that changing default ports for services is just "security by obscurity" and is easily defeated by scanning for open ports. My question is this, though, if the ...
1
vote
1answer
2k views

Vulnerability by leaving an open port in a pc

I have the following set-up. Home pc ---reverse ssh tunnel---> to linux server The reverse ssh tunnel is set-up so that on my home pc, port 22 is open, but I have nothing currently listening on that ...
-4
votes
1answer
3k views

DoSing my Home Network with only a Public IP address [closed]

+--------------------------------------------------------+ | Client Host Name |.. IP Address ..|.... MAC Address ...| | Desktop-Home ....| 192.168.1.100 | 00:19:D1:EA:03:68 | | GT-S5380K ...
1
vote
4answers
814 views

SYN scan victim sending back RST

I'm confused on the case of SYN scan and closed ports (the case of open ports makes sense). So, the attacker sends a ~40 byte SYN packet, a "closed port" would send a RST packet back to the attacker ...
-1
votes
2answers
490 views

Keyloggers and Email Accounts [duplicate]

This morning, I was experimenting with some keyloggers and noticed that they have a feature to send e-mails to the attacker. How can these e-mails be intercepted? Let us say that I have a packet ...
1
vote
1answer
1k views

What are the ports used by Online Email Accounts such as Yahoo Mail, Gmail, etc.?

Let us say that I send an email using Yahoo Mail or GMail. Can this email be intercepted using a packet sniffer? On which port does the email travel? HTTP, SMTP, POP3?
7
votes
6answers
2k views

How to bypass Nmap blockage?

I rent a server, and my provider seems to be blocking nmap. Is there any other tools I could use to test my home network from the outside? Also, does blocking nmap on a network provide any security? ...
1
vote
2answers
568 views

Spike in TCP port 5904 activity - what for?

There is an 'Internet Weather Report' on the Threat!Traq video blog by AT&T security researchers. In the March 14th broadcast, at around 31 minutes in, they mention an increase of scanning ...
0
votes
3answers
671 views

How can i reject connection from LAN and WAN to some ports?

Scanning with nmap, I discovered that there are 3 open ports on my server. I want to deny any access to these ports from any machine, regardless of whether it is on the same LAN or via WAN. How do I ...
2
votes
2answers
5k views

How to configure iptables for must open ports?

On my machine there are web services which can be accessed from any PC connected to the same network segment (WiFi for example). I want to use IPtables on the machine to prevent any web services from ...
0
votes
2answers
163 views

Security implications of forwarding ports 1-10000 on Airport Express?

Today I found that ports 1-10000 were being forwarded on an Airport Express that I as well as a fair number of other people share. This was setup by another user. There are multiple machines and ...
3
votes
3answers
5k views

Is it really better to use port 80 or 443 for outgoing traffic in order to bypass user firewall?

I recently created a reverse connection shell in C#. I tested it with some computers and I noticed that some computers connected back correctly and I established connection with them but another ...
0
votes
1answer
1k views

how is my router being modified to include WAN port-binding items for Teredo and Spotify [closed]

My router's configuration app (browser-interface) has a page for Virtual Server. It has entries I did not create, at least not intentionally using the interface, for Teredo, Skype, Spotify, uTorrent. ...
3
votes
3answers
2k views

Is there is a way to lock my USB port over the device physically?

Is there is a way to lock my USB port over the device physically ? For example I am connecting the USB mouse and keyboard on an public computer but I do not want anyone to remove them physically. I ...
5
votes
2answers
2k views

How should an outgoing connection white-list be created?

I see my previous question was closed as duplicate of Why block outgoing network traffic with a firewall?. The answers that everyone agree with mention the value of blocking outgoing connections (to ...
2
votes
1answer
376 views

How should I audit and monitor shared TCP ports in Windows?

Windows has a feature called .NET TCP Port Sharing which allows different .NET applications to share the same TCP/IP port. I would like to monitor the source and destination connections of each ...
3
votes
2answers
122 views

Auditing Existing Socket Connection

Is there any way to interact with a program's socket traffic without installing Winpcap? I understand that the one listening program per port is a restriction regarding TCP/IP, but I guess I'm more ...
1
vote
2answers
2k views

When can closing port 80 be a problem?

Since port 80 is typically used for HTTP must a web server have it open or otherwise configure links to specify a different port (e.g. http://www.example.com:8080/mypage.html)? For example this site ...
3
votes
2answers
4k views

If a port is closed how come you can still use it?

What does it actually mean for a port to be closed or stealthed? According to tests I've run all my ports (tested) are stealthed but clearly I can still use the internet. Also are the terms "blocked" ...
0
votes
2answers
328 views

can a backdoor executable be used on an occupied port?

Suppose I am doing a penetration test on a network that has a firewall that blocks all ports except 80, 110, and 443. I want to use a metasploit reverse-TCP backdoor executable written in msfpayload ...
4
votes
3answers
3k views

How to figure out which open ports or services are insecure?

We have around one thousand machines on internet. We do port scanning with nmap, and find many ports open on these machines. Sometime we found administrative website using HTTP instead of HTTPS, we ...
1
vote
2answers
2k views

How to check if a port can be accessed from the outside

I want to be sure that the firewall protecting the intranet is effectively rejecting/granting access to a port. I have no access to the firewall nor any other external machine. Is that possible at ...
5
votes
2answers
752 views

Is it good practice to manually lock down ports on each host

We have a strong perimeter firewall. Would it make sense to still use IPTables on each host to hard block any and all ports except for the ones that are needed (DNS, 80 for the web server, nagios ...
0
votes
2answers
4k views

Port scanning legal or not? [closed]

Is port scanning legal ? In which countries ? my option : I think port scanning is like a short-walk( or a long-walk) in the neighbourhood, just curious about neighbours are up to. I think that ...
4
votes
4answers
1k views

How can I scan open ports without being traced back

I would like to scan open ports of a server. But as far as I know, when I try to scan the open ports with something like nmap in shell they would be able to trace me. Is there a way to secure this ...
0
votes
1answer
1k views

Telnet local privilege escalation exploits possible even when telnet is running under a normal user account?

http://www.exploit-db.com/exploits/8055/ says: The telnet protocol allows to pass environment variables inside the telnet traffic and assign them to the other side of the tcp connection. The ...