If you have a web server with all ports closed (except, of course, the necessary HTTP) what kind of attacks can an attacker use to hack into the system? Are the only vulnerabilities stuff like injection attacks or DDoS attacks? If there are some, how could you defend against them?

1 Answer 1


An attacker can still use the full range of attacks on the webserver: everything from password guessing to code injection to buffer overflows to path traversal to who-knows-what. The only thing closing non-HTTP ports does is prevent the attacker from going after other programs that might be listening for incoming traffic (eg. a mailserver).

  • What about if the target is a regular computer? Any attacks for that?
    – APCoding
    Oct 4, 2015 at 21:05
  • Are you saying the only port exposed in a web server port on this personal computer? There's still physical and social attacks. There's out of date web server software. There's web vulnerabilities for the website that's running on that computer.
    – user79537
    Oct 4, 2015 at 22:05
  • You answered my question about web servers. I asked this purely for curiosity.
    – APCoding
    Oct 5, 2015 at 0:59

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .