Questions tagged [ports]

In computer networking a port is a software construct serving as a communications endpoint in a computer's host OS.

Filter by
Sorted by
Tagged with
0 votes
0 answers
85 views

Is it possible to infect a monitor via HDMI plus Ethernet [duplicate]

I caught a virus because of an exe file I downloaded to my computer last week. I am replacing my modem, graphics card, motherboard, processor, ssd and ram components with new ones. What are the ...
Christmas's user avatar
0 votes
0 answers
171 views

How to perform focused scan of public IP using nmap? [duplicate]

Scanning my router using the private IP address using nmap reveals the open ports: Obtaining the public IP address of the router can be achieved by executing the command: nslookup myip.opendns.com ...
machine_1's user avatar
  • 101
2 votes
2 answers
124 views

Attack surface when no incoming port is open [closed]

Let's assume that the only attack to be feared on a computer is one via the network in which the machine is embedded. What options does an attacker have if the machine has no open incoming ports? (For ...
fkarger's user avatar
  • 21
1 vote
2 answers
171 views

Random High Ports - Firewall Config

I'm from a digital forensics background and it has been a while since I studied networking and so am a little rusty on a few aspects. I am looking to implement a remote forensics solution within an ...
forensicsguy0506's user avatar
0 votes
1 answer
133 views

Port scanning but Windows firewall isn't logging the connection

We are seeing port scans coming from many of our company devices and scanning our internal network over the VPN. The events are not reproducible and are not regular. Scans always follow the same ...
H3GE's user avatar
  • 1
0 votes
1 answer
115 views

Auto-opening a reverse bash shell

Is it possible to use a tool like netcat to create a listener on the attacker's device with a specific command that when the target device or machine connects to this IP and port, it runs a bash shell ...
19216811's user avatar
0 votes
0 answers
156 views

NMAP same destination ip, different scanner interface, different result

I am trying to check the port status of a external IP using NMAP, I am getting different result on different interface to same destination (destination is a public IP). When NMAP tried from the ...
Shaim Khanusiya's user avatar
-2 votes
3 answers
857 views

Could someone hack into my website through http ports?

Let's say ports 80 and 443 open for my website hosted by Amazon AWS. Could someone figure out a way to exploit somehow or is that just nearly impossible and something no one would need to worry about?
ThrownRedstone's user avatar
1 vote
0 answers
484 views

How would you hide yourself whilst conducting a scan on a target network to identify open service ports?

I am working on this question which asks how you would conduct a scan of a target network to identify open service ports without revealing your IP address. It wants details such as IP address ...
Thanos's user avatar
  • 111
0 votes
1 answer
138 views

Difference Between Exploit Kits Vs. Probing a Network for Vulnerabilities

I don’t understand exactly the difference between websites using exploit kits on visiting users vs. a website server probing a network for vulnerabilities and then exploiting them. The scenario is ...
Quentin Bolton's user avatar
1 vote
0 answers
125 views

Is someone accessing my win10 computer?

I have been wondering if someone is accessing my system and after doing using some basic assessment tools like netstat and event viewer, found some unusual open ports(12345) and special Logon! below ...
M D's user avatar
  • 11
6 votes
4 answers
986 views

How can non-root intercept privileged loopback ports?

Please walk through how an attacker can intercept Chrome's connection to 127.0.0.1:999, as suggested by the warning below. This warning is consitently displayed across many versions of Chrome in many ...
personal_cloud's user avatar
0 votes
0 answers
2k views

Scan for open ports on subdomain

I am curently scanning for open ports on a subdomain. Say I have example.com and subdomain.example.com, but this subdomain can only be reached at port 8443. How can I scan for other potential open ...
vargr616's user avatar
0 votes
2 answers
217 views

Does AWS security group block unintentionally exposed ports from Docker?

My typical cloud server hardening includes blocking ports at the UFW level on the server as well as at the AWS security group level. I recently learned that Docker overwrites your IPTables. Given that,...
angryserver's user avatar
1 vote
0 answers
334 views

Does Label Distribution Protocol (LDP) on port 646 need to be open to the Internet? What are the risks associated with it?

I am a security engineer trying to understand the risks of having LDP exposed to the Internet on port 646. I cannot find much information available on the Internet documenting this. Any information ...
Justin Massey's user avatar
1 vote
0 answers
2k views

Best port to setup Outline VPN for obfuscation

Many outline access keys use a random port but some do 443, I’ve found out since port 443 is for http its harder to find out that port is using a vpn. So the question is, why don’t other Outline ...
Emily1001's user avatar
1 vote
1 answer
610 views

How to confirm what service is running on a port identified by nmap?

Probing with nmap returns BlackICE on a couple of ports however it seems to be a really old tool according to these manuals. Starting Nmap 7.80 ( https://nmap.org ) at 2022-10-16 20:27 EDT Nmap scan ...
Dan's user avatar
  • 141
1 vote
1 answer
317 views

How can I port scan my p2p device?

I have a device and I am trying to port scan it. I did the basic nmap -A -p0- 192.168.0.x but I am just getting 0/tcp filtered unknown so I don't think it is working. The device works on p2p so I am ...
AskedSuperior's user avatar
1 vote
1 answer
228 views

Prevent Discovery of Port from NMAP scan using -Pn

Is there a way to prevent a port from being discovered by nmap? I found that port 1433 is still being flagged as "open" when using the following command: nmap <ip_add> -Pn -p1433 or ...
Lyght's user avatar
  • 11
2 votes
2 answers
341 views

Web application discovery: Can there be virtual hosts configured even when there is a response without host header?

I'm currently learning how to discover web applications running on a machine using port scanning, vhost bruteforcing and directory fuzzing. When it comes to port scanning, there is one thing I can't ...
Sven's user avatar
  • 125
0 votes
1 answer
242 views

Deploy to Digital Ocean droplet from Github Action - Should I leave the SSH port open for future deployments?

I'm going to a deploy a web app (angular static frontend and node backend in docker) to digital ocean droplet. Deployment is done from Github Action by essentially loging via SSH to the droplet and ...
Mike Strutter's user avatar
0 votes
4 answers
749 views

Benefits of non-standard SSH port when password authentication is turned off

Is there any benefit of using a non-standard SSH port when PasswordAuthentication is turned off in sshd? The only benefit of non-standard SSH ports I know of is a reduction of the amount of brute ...
303's user avatar
  • 101
0 votes
2 answers
654 views

Windows IP Helper service listening on port 1000 [closed]

On a Windows 10 Home machine (21H2 19044.1741), I noticed one of my applications failed to listen on port 1000, because something was already using that port. That struck me as peculiar, because I ...
Liam Stojanovic's user avatar
0 votes
0 answers
88 views

nmap scanning Raspbian with strange results

I'm a high schooler in a CyberDefense Class and we are learning to PenTest. I'm on Red Team and my teacher set up a system with Rasbian as the OS. When I run a scan on the computer scanning the Top ...
Aaron908's user avatar
0 votes
1 answer
5k views

Are there security implications of allowing Discord through Windows Firewall?

I just installed Discord (downloaded from the official Discord website) and after the install a Windows Firewall pop-up appears asking me if I want to allow Discord through Windows Firewall. I don't ...
em1l10200's user avatar
0 votes
1 answer
717 views

Why is Nessus report HTTP running a web server on port 80 when I'm sure that it isn't?

From a Nessus scan I have the following output regarding HTTP and the use of port 80: Info N/A 43111 HTTP Methods Allowed (per directory) Info N/A 24260 HyperText ...
Sjim49's user avatar
  • 23
1 vote
1 answer
193 views

What is the security impact to using a port different from 443 for HTTPS in my router

Are there any advantages or disadvantages for the security when using a non-standard port (i.e. not 443) for HTTPS in my router?
127 001's user avatar
  • 56
1 vote
0 answers
127 views

How to evaluate a responsive but unknown network protocol?

I am studying CREST CPSA where the syllabus is listed here. There is a part of the syllabus which states I should know the Evaluation of responsive but unknown network applications. I find this ...
questioner's user avatar
1 vote
1 answer
131 views

How much network noise is normal? [closed]

on my Ubuntu VPS I am getting a lot of requests and portscans from foreign sources. They are all blocked by UFW. However my question is, if this much "network noise" is normal or is my ...
Michel1506's user avatar
1 vote
1 answer
1k views

Why when i nmap scan a machine i get the port 554 (RTSP) open?

I train on vulnerable boxes and during my recon phase, I use nmap to collect info on open ports. I use the command nmap -sS [IP|URL] and no matter the machine, I get the result that port 554 - RTSP ...
Jarthaul's user avatar
0 votes
1 answer
295 views

Is it possible to spoof a service running on a port in Ubuntu?

I was looking into the idea of port spoofing, and I came across this GitHub repository. I'm mainly looking to disguise my computer as something else, whereas this program opens every TCP port and ...
sketch54's user avatar
1 vote
1 answer
1k views

What are the drawbacks of a stealthy port scan?

I read that port scanning services like nmap will conduct a "TCP Connect Scan". They'll attempt to make a TCP connection to each of the ports within the range provided. But because each of ...
redpanda2236's user avatar
0 votes
0 answers
213 views

Mixed results from different port scanners - stealth vs closed

I did some port scanning of the local network, as a bit of security due diligence, expecting the first 1000 to be stealthed. However, the results are mixed, when running the scan with different ...
S Kos's user avatar
  • 1
0 votes
1 answer
272 views

ec2 instance insecure to allow ssh to any ip address

I have a linux instance deployed on AWS EC2. Sorry for my dumb question, but I'll ask anyways just to be safe. Q1. While creating an instance, I set anyone 0.0.0.0:0 for the ssh. Though, on the next ...
Nika Kurashvili's user avatar
0 votes
3 answers
798 views

Why would a legitimate application run on a non-standard port?

Among the many "threats", I see on my SIEM, a non-standard port is a top one. It's always been a false positive, but I don't understand why this happens frequently?
user270109's user avatar
0 votes
0 answers
37 views

How to configure Snort 3 to detect nmap's port scanning? [duplicate]

How to configure snort 3 to detect nmap's port scanning? For instance I want to know that an external machine A is looking with nmap for open ports on my machine B. Such a port scan can include all ...
Dawid's user avatar
  • 101
0 votes
2 answers
921 views

Selection of port for HTTPs based URL

I have an application and it will be exposed to HTTPs based URL. I want to put a port explicitly. So if I do I can select 8443 port. https://<IP_ADDRESS>:8443/myApplication If I don't put a ...
Tahir's user avatar
  • 103
0 votes
0 answers
276 views

Router scanning ports on all connected devices

From time to time, my router starts to scan ports on all the connected devices. I have an internal RPi server which I restricted its access to the internet from the router. I checked the "/var/...
POD's user avatar
  • 101
0 votes
3 answers
3k views

Nmap shows different results when connected to VPN [closed]

I am trying to determine why nmap would show different results when I am connected to a VPN service. When I am connected to Nord VPN, it shows two additional ports which do not seem to be open. No VPN ...
A_B's user avatar
  • 101
-1 votes
1 answer
143 views

How can you attack or redirect the client from the server over an RDP or SSH conneciton? [closed]

I have a penetration testing scenario where I am on the network with two machines, Machine A and Machine B. I have complete control over Machine B and am trying to leverage that to get access to ...
PenetrationTester's user avatar
1 vote
1 answer
296 views

How do I differentiate a DDoS attack from a DoS attack?

My server is under attack on an specific port but I am confused whether is a DDoS attack or a DoS attack (if it requires a botnet or is using some kind of trick). The entire server is available (...
Naitoreven's user avatar
0 votes
1 answer
1k views

How to check if my ports are exposed to the internet

[Crossposting from SO] I am trying to make a port scanner in Python and trying to list which all ports are accessible by anyone remotely. Using the socket.connect_ex package, I was able to check which ...
Eagle's user avatar
  • 115
8 votes
1 answer
13k views

What is insecure about the "insecure" option of NFS exports?

Why is it considered insecure for an NFS export to allow connections originating from high ports? Compare the manual: exportfs understands the following export options: secure This option requires ...
bers's user avatar
  • 240
0 votes
2 answers
780 views

If HTTPS only runs on a single port, why is SYN flooding an issue?

I've read online that SYN flooding is when "the attacker sends repeated SYN packets to every port on the targeted server." However, HTTPS only runs on port 443. Therefore, why is it ...
Guy4444's user avatar
  • 47
1 vote
1 answer
338 views

Change ettercap default port

Guys does anyone know how I can change the port that ettercap runs? I need it to run on port 8080. When I try to run sudo ettercap -G it presents me with this error: ERROR : 13, Permission denied [/...
Maria Eduarda's user avatar
1 vote
0 answers
374 views

Closed Port on Metaspoilt framework [closed]

I run Kali Linux OS on my PC and I use the Metasploit Framework. But I'm unable to access any ports when I run sudo netdiscover it always outputs that all ports are closed, even though Metasploit has ...
DRE's user avatar
  • 11
-1 votes
1 answer
328 views

Do you have to be on the same WIFI for a Buffer Overflow attack to work?

I know how Buffer Overflows work but in order to do them do you have to be on the same WIFI as your victim. You need to send a packet to a specific device on a specific port. Therefore, unless port ...
user251200's user avatar
0 votes
3 answers
3k views

Is there a way to close 22 SSH port from public, ubuntu?

I am using putty and private key to access my development server. I used Nmap to see which ports are visible to the public, and in fact the 22 is open. Is it possible to hide open port from the public?...
filtertips's user avatar
2 votes
1 answer
413 views

Docker container exposed port vulnerabilities on Debian server?

I'm configuring a Debian (Stretch) webserver to run docker containers for socks requests. So, the application would be able to authenticate (on port 1080) with the Dante server running inside the ...
user13581602's user avatar
0 votes
1 answer
180 views

Estimate the number of host computers on the private network by port scanning

If we have a private network connected to the Internet with NAT, how can an attacker estimate the number of host computers in network using port scanning? For both possible modes, the attacker inside ...
Meysam's user avatar
  • 113

1
2 3 4 5
9