0

I heard hackers' top ports to hack computers through are port 80 and port 443. How do they do this though aren't port 80 and port 443 just for HTTP requests such as GET, POST?

1

Any open port can be used as an attack vector by a hacker to get into the system. Port 80 and port 443 just happen to be the most common ports open on the servers. Now there are two different ways to get into the system through port 80/443:

  1. Exploiting network behavior.
  2. Exploiting application behavior. (If any application is listening over port 80/443)

Former includes vulnerabilities in the system stack (platform) itself that is responsible for accepting data through the port and passing it to the application.

Latter includes vulnerabilities in the application, i.e., when the data has already reached application through platform.

Most common attacks exploit vulnerability in website running on port 80/443 to get into system, HTTP protocol itself or HTTP application (apache, nginx etc.) vulnerability.

| improve this answer | |
  • can you explain number 1 more I don't understand it. – mohamed elgamal Apr 15 at 0:00
  • No matter which port you connect on a server, the reference can always be compared with OSI model. Layer 7 - Application. Layer 6 - Presentation. Layer 5 - Session. Layer 4 - Transport. Layer 3 - Network. Layer 2 - Data Link. Layer 1 - Physical. HTTP operates at Layer 7 but the packet can only come from Layer 1 to Layer 7. My point is vulnerability can also be present in any of the other layers of this stack but Application layer. – r0x0t Apr 15 at 0:13
2

No port is vulnerable. The software responding on those ports (web server) or the application you access from that service (web page) can be vulnerable.

Please take a look at the OSI model, which will help you with the concept of a "technology stack"

| improve this answer | |
0

80 HTTP, 443 HTTPs, they are used by web servers.

Can you hack something through port 80/443? It depends on the specific service that runs on those ports (which specific web server, i.e. nginx), and on the content which is provided by the web server. Usually it's latter which is vulnerable (sql injection, IDOR, look at OWASP top 10), even though also the web server can be configured wrongly.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.