Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [ports]

In computer networking a port is a software construct serving as a communications endpoint in a computer's host OS.

Filter by
Sorted by
Tagged with
0 votes
0 answers
39 views

nmap scanning Raspbian with strange results

I'm a high schooler in a CyberDefense Class and we are learning to PenTest. I'm on Red Team and my teacher set up a system with Rasbian as the OS. When I run a scan on the computer scanning the Top ...
user avatar
0 votes
0 answers
11 views

Can I open ports 23 and 22 on a F@st 5355 home router that doesn't allow it in the web GUI [migrated]

As I said in the title I want to open the ports for ssh and telnet mainly on my home router anyway posable. So far I've tried the tutorial at Sorry Telstra but this is my F@ST 5355 router by ThaFresh ...
user avatar
  • 1
0 votes
1 answer
60 views

Are there security implications of allowing Discord through Windows Firewall?

I just installed Discord (downloaded from the official Discord website) and after the install a Windows Firewall pop-up appears asking me if I want to allow Discord through Windows Firewall. I don't ...
user avatar
0 votes
1 answer
52 views

Why is Nessus report HTTP running a web server on port 80 when I'm sure that it isn't?

From a Nessus scan I have the following output regarding HTTP and the use of port 80: Info N/A 43111 HTTP Methods Allowed (per directory) Info N/A 24260 HyperText ...
user avatar
  • 23
1 vote
1 answer
54 views

What is the security impact to using a port different from 443 for HTTPS in my router

Are there any advantages or disadvantages for the security when using a non-standard port (i.e. not 443) for HTTPS in my router?
user avatar
  • 13
0 votes
1 answer
35 views

nmap -p- command usage

I apologize if this is a very commonly asked question but I just need confirmation on something. I am going through my eJPT certification right now and I just want to know when I run nmap -p- <ip ...
user avatar
1 vote
0 answers
34 views

How to evaluate a responsive but unknown network protocol?

I am studying CREST CPSA where the syllabus is listed here. There is a part of the syllabus which states I should know the Evaluation of responsive but unknown network applications. I find this ...
user avatar
0 votes
0 answers
21 views

Disguising Device Information During IP and Open Port Scans

I am getting into the field of penetration testing and had a question about device information scans. I know that you can scan all of the devices on a network and scan for open ports, and in the ...
user avatar
1 vote
1 answer
71 views

How much network noise is normal? [closed]

on my Ubuntu VPS I am getting a lot of requests and portscans from foreign sources. They are all blocked by UFW. However my question is, if this much "network noise" is normal or is my ...
user avatar
1 vote
1 answer
107 views

Why when i nmap scan a machine i get the port 554 (RTSP) open?

I train on vulnerable boxes and during my recon phase, I use nmap to collect info on open ports. I use the command nmap -sS [IP|URL] and no matter the machine, I get the result that port 554 - RTSP ...
user avatar
0 votes
1 answer
36 views

Is it possible to spoof a service running on a port in Ubuntu?

I was looking into the idea of port spoofing, and I came across this GitHub repository. I'm mainly looking to disguise my computer as something else, whereas this program opens every TCP port and ...
user avatar
1 vote
1 answer
97 views

What are the drawbacks of a stealthy port scan?

I read that port scanning services like nmap will conduct a "TCP Connect Scan". They'll attempt to make a TCP connection to each of the ports within the range provided. But because each of ...
user avatar
0 votes
0 answers
65 views

Mixed results from different port scanners - stealth vs closed

I did some port scanning of the local network, as a bit of security due diligence, expecting the first 1000 to be stealthed. However, the results are mixed, when running the scan with different ...
user avatar
  • 1
0 votes
1 answer
64 views

ec2 instance insecure to allow ssh to any ip address

I have a linux instance deployed on AWS EC2. Sorry for my dumb question, but I'll ask anyways just to be safe. Q1. While creating an instance, I set anyone 0.0.0.0:0 for the ssh. Though, on the next ...
user avatar
0 votes
3 answers
173 views

Why would a legitimate application run on a non-standard port?

Among the many "threats", I see on my SIEM, a non-standard port is a top one. It's always been a false positive, but I don't understand why this happens frequently?
user avatar
0 votes
0 answers
31 views

How to configure Snort 3 to detect nmap's port scanning? [duplicate]

How to configure snort 3 to detect nmap's port scanning? For instance I want to know that an external machine A is looking with nmap for open ports on my machine B. Such a port scan can include all ...
user avatar
  • 1
0 votes
2 answers
107 views

Selection of port for HTTPs based URL

I have an application and it will be exposed to HTTPs based URL. I want to put a port explicitly. So if I do I can select 8443 port. https://<IP_ADDRESS>:8443/myApplication If I don't put a ...
user avatar
  • 103
0 votes
0 answers
137 views

Router scanning ports on all connected devices

From time to time, my router starts to scan ports on all the connected devices. I have an internal RPi server which I restricted its access to the internet from the router. I checked the "/var/...
user avatar
  • 101
0 votes
3 answers
807 views

Nmap shows different results when connected to VPN [closed]

I am trying to determine why nmap would show different results when I am connected to a VPN service. When I am connected to Nord VPN, it shows two additional ports which do not seem to be open. No VPN ...
user avatar
  • 101
-1 votes
1 answer
95 views

How can you attack or redirect the client from the server over an RDP or SSH conneciton? [closed]

I have a penetration testing scenario where I am on the network with two machines, Machine A and Machine B. I have complete control over Machine B and am trying to leverage that to get access to ...
user avatar
1 vote
1 answer
240 views

How do I differentiate a DDoS attack from a DoS attack?

My server is under attack on an specific port but I am confused whether is a DDoS attack or a DoS attack (if it requires a botnet or is using some kind of trick). The entire server is available (...
user avatar
  • 11
0 votes
1 answer
341 views

How to check if my ports are exposed to the internet

[Crossposting from SO] I am trying to make a port scanner in Python and trying to list which all ports are accessible by anyone remotely. Using the socket.connect_ex package, I was able to check which ...
user avatar
  • 115
4 votes
1 answer
5k views

What is insecure about the "insecure" option of NFS exports?

Why is it considered insecure for an NFS export to allow connections originating from high ports? Compare the manual: exportfs understands the following export options: secure This option requires ...
user avatar
  • 190
0 votes
2 answers
229 views

If HTTPS only runs on a single port, why is SYN flooding an issue?

I've read online that SYN flooding is when "the attacker sends repeated SYN packets to every port on the targeted server." However, HTTPS only runs on port 443. Therefore, why is it ...
user avatar
  • 47
0 votes
1 answer
137 views

Change ettercap default port

Guys does anyone know how I can change the port that ettercap runs? I need it to run on port 8080. When I try to run sudo ettercap -G it presents me with this error: ERROR : 13, Permission denied [/...
user avatar
1 vote
0 answers
108 views

Closed Port on Metaspoilt framework [closed]

I run Kali Linux OS on my PC and I use the Metasploit Framework. But I'm unable to access any ports when I run sudo netdiscover it always outputs that all ports are closed, even though Metasploit has ...
user avatar
  • 11
-1 votes
1 answer
168 views

Do you have to be on the same WIFI for a Buffer Overflow attack to work?

I know how Buffer Overflows work but in order to do them do you have to be on the same WIFI as your victim. You need to send a packet to a specific device on a specific port. Therefore, unless port ...
user avatar
0 votes
3 answers
762 views

is there a way to close 22 ssh port from public, ubuntu?

I am using putty and private key to access my development server. I used Nmap online port scanner, to see which ports are visible to the public, and in fact, the 22 is open. My question is, is it ...
user avatar
2 votes
1 answer
216 views

Docker container exposed port vulnerabilities on Debian server?

I'm configuring a Debian (Stretch) webserver to run docker containers for socks requests. So, the application would be able to authenticate (on port 1080) with the Dante server running inside the ...
user avatar
0 votes
1 answer
107 views

Estimate the number of host computers on the private network by port scanning

If we have a private network connected to the Internet with NAT, how can an attacker estimate the number of host computers in network using port scanning? For both possible modes, the attacker inside ...
user avatar
  • 113
11 votes
2 answers
4k views

Security implications of granting non-root access to privileged ports (<1024)

Lots of solutions to this problem e.g. here and here but in order to decide which is best I'd need to know more about the security implications of each solution (or at least in general). My context: I'...
user avatar
1 vote
1 answer
98 views

What is the threat/risk difference in opening multiple ports on one physical NIC on a home server vs creating VLANs and opening ports on each VLAN?

I have a single home server with a single NIC. I intend to run numerous services -- some will be internet exposed, some will not. I don't know if I am going to run them as VMs or Docker container but ...
user avatar
0 votes
1 answer
201 views

What's this port? [closed]

Listing all the ports currently in use on my mac running $ sudo lsof -i -n -P | grep TCP, I see six entries starting with a weird-looking string of "2BUA8C4S2". A web search for that string ...
user avatar
2 votes
1 answer
607 views

scan forwarded ports with OpenVAS/GVM?

I'm currently learning about network security and came across a problem, maybe I'm just missing something obvious but I'll try to explain my environment: I have a Kali Linux VM connected to the WAN ...
user avatar
  • 23
0 votes
1 answer
254 views

Intensive 586 (ms-shuttle) port scan/exploit/hacking attempts

Recently i wanted to play a bit with TCP/UDP networking (and touch some custom HTTP server impl) on C# and found out that i'm getting requests from totally unknown dudes, such as this one: FROM: [::...
user avatar
1 vote
0 answers
193 views

Is port scanning used by software for legitimate reasons?

Does normal network traffic sent out by software or anything else use port scanning for legitimate reasons? I'm using psad on my linux server and am unsure if setting the auto-ban IP feature on danger ...
user avatar
  • 11
-1 votes
2 answers
552 views

What are the advantages of port scanning?

It seems like all the google results to this question answer what port scanning is, but go into little detail about how a pentester or hacker could use the information about what ports a network has ...
user avatar
0 votes
1 answer
90 views

Can anyone tell me at this platform that what is the difference between filtered ports and blocked ports? [duplicate]

please help me out, I am confused in this.
user avatar
1 vote
1 answer
327 views

Is it safe to expose port 22 on a database VM? [closed]

I have seen many answers to this question in different scenarios but I am still unsure of the actual answer. I have a VM in the cloud (Azure), which will be hosting my production database. Is it safe ...
user avatar
  • 113
1 vote
3 answers
680 views

Is there a possible security advantage to using a non standard port for ssl/https?

There are documented (albeit debated) advantages to using a non standard port for SSH. I also read in various places about using a non-standard port for https (e.g. 8443). Is there a possible ...
user avatar
  • 413
0 votes
2 answers
1k views

Nmap scanning with and without proxychains has different behaviour

I'm doing a nmap scan to my own machine to my own machine. First of all I set the port 333 to listen with this command sudo nc -lvnp 333 On the other terminal I run sudo nmap -O -sV -p 0-65535 IP ...
user avatar
  • 103
1 vote
1 answer
2k views

Why can I access the internet with all ports closed on firewall? [closed]

For the heck of it I wanted to see how much I could close down my router from the rest of the internet. I was hoping turning on the firewall, removing any port forwarding and turning off UPnP would ...
user avatar
  • 13
0 votes
0 answers
188 views

Very odd traffic - is it legit?

While troubleshooting an unrelated network problem, I noticed an interesting pattern on one of our networks for the last few days (at least). Before crying wolf, I wanted to see if somebody here may ...
user avatar
  • 1,009
0 votes
1 answer
127 views

Attacking through an open but not listened port [duplicate]

Let us say, we open a port, say port 123, so that upon listening, an application on the server can receive incoming packets through the port 123. If there is no way that an inside application on the ...
user avatar
  • 103
2 votes
1 answer
18k views

Microsoft DS vulnerability?

I heard that Microsoft DS is a port that is commonly used by hackers to hack computers due to its ability to transfer files. How do they transfer files with Microsoft DS? Do they need an exploit to ...
user avatar
-1 votes
3 answers
14k views

Is TCP Port 80 (HTTP) vulnerable?

I heard hackers' top ports to hack computers through are port 80 and port 443. How do they do this though aren't port 80 and port 443 just for HTTP requests such as GET, POST?
user avatar
1 vote
2 answers
462 views

Will blocking outgoing traffic from port 80 and only allowing port 443 from my home network lead to more security?

Is blocking outgoing HTTP connections from a home network and only allowing HTTPS connections reasonable? Will it reduce the chances of a man in the middle attack?
user avatar
5 votes
1 answer
484 views

Is it security risk to host CS:GO server on my PC?

I have quite good hardware in my PC and an optic fiber connection. I opened a CS:GO (Counter Strike Global Offensive) server on it, and made it public. The IP for connecting to this server is my ...
user avatar
0 votes
0 answers
141 views

Is it a Bad Idea™ to open all IPv6 ports for devices in an isolated guest network?

At home I have a dual-stack IPv4/IPv6 broadband connection, and I also have a wireless access point. The access point currently bridges all traffic into my LAN, which is not segmented in any way, so ...
user avatar
0 votes
1 answer
83 views

Is my server safe from remote hackers if I only allow 1 port and 1 service behind it which only hashs incoming bytes stream & send the hash key back? [duplicate]

I have a python script ,which accepts an incoming connection, reads from the byte stream ,hash it (I'm pretty sure the hash function itself can't be exploited) ,sends the hash key back ,then closes ...
user avatar
  • 101

1
2 3 4 5
8