Tag Info

New answers tagged

1

A stealth scan as it is commonly called is a half open TCP connection. Rather than: SYN -> <- SYN/ACK ACK -> it goes SYN -> <- SYN/ACK RST -> It's only referred to as stealth because many applications log a connection on its listening port. As this scan never completes the TCP connection, no log entry is made. Its in no way undetectable. The ...


1

What you should do is resolve the IP addresses to see who uses them and check (IANA) port designations. Then adding audit rules (only for local clients though) gives you at least a time stamp, process and user Id, forcing clients through a proxy gets you at least a time stamp and host name and capturing packets (ulogd, tcpdump, Snort rule) may provide ...


0

The easiest solution without having to fire up your server application would be to use netcat. user@1.2.3.4 ~$ nc -vl 1234 Connection from 9.8.7.6 port 1234 [tcp/*] accepted user@9.8.7.6 ~$ nc 1.2.3.4 1234 Please forgive me if this does not answer your question as this does create a listening socket. I just wanted to share this as an option.


1

The simplest answer to your question would be YES, but you need to take into account what software is listening on that port. Since you've installed LAMP stack (Linux,Apache,MySQL,PHP) then most likely it's Apache 2.4 listening on that port with PHP enabled as well. You would need to check your Apache (2.4) and PHP (5.5) versions for known vulnerabilities. I ...


7

Port 80 is the standard port for web servers. It is supposed to be listening for people to connect to it with their web browsers. That is how it works. All web servers are targets for people to hack, so technically yes, you are open to attacks-- But that is the nature of a public web server. You install things like firewalls and intrusion detection ...



Top 50 recent answers are included