Questions tagged [ports]
In computer networking a port is a software construct serving as a communications endpoint in a computer's host OS.
389
questions
0
votes
3answers
116 views
Why would a legitimate application run on a non-standard port?
Among the many "threats", I see on my SIEM, a non-standard port is a top one. It's always been a false positive, but I don't understand why this happens frequently?
0
votes
0answers
31 views
How to configure Snort 3 to detect nmap's port scanning? [duplicate]
How to configure snort 3 to detect nmap's port scanning? For instance I want to know that an external machine A is looking with nmap for open ports on my machine B.
Such a port scan can include all ...
0
votes
2answers
76 views
Selection of port for HTTPs based URL
I have an application and it will be exposed to HTTPs based URL. I want to put a port explicitly. So if I do I can select 8443 port.
https://<IP_ADDRESS>:8443/myApplication
If I don't put a ...
0
votes
0answers
100 views
Router scanning ports on all connected devices
From time to time, my router starts to scan ports on all the connected devices. I have an internal RPi server which I restricted its access to the internet from the router. I checked the "/var/...
0
votes
3answers
350 views
Nmap shows different results when connected to VPN [closed]
I am trying to determine why nmap would show different results when I am connected to a VPN service.
When I am connected to Nord VPN, it shows two additional ports which do not seem to be open.
No VPN
...
-1
votes
1answer
60 views
How can you attack or redirect the client from the server over an RDP or SSH conneciton? [closed]
I have a penetration testing scenario where I am on the network with two machines, Machine A and Machine B. I have complete control over Machine B and am trying to leverage that to get access to ...
1
vote
1answer
183 views
How do I differentiate a DDoS attack from a DoS attack?
My server is under attack on an specific port but I am confused whether is a DDoS attack or a DoS attack (if it requires a botnet or is using some kind of trick). The entire server is available (...
0
votes
1answer
198 views
How to check if my ports are exposed to the internet
[Crossposting from SO]
I am trying to make a port scanner in Python and trying to list which all ports are accessible by anyone remotely.
Using the socket.connect_ex package, I was able to check which ...
0
votes
0answers
52 views
nmap -sn different results than - sL (-sL shows missing host from -sn)
Executing nmap -sn 192.168.2.1/24 gives all hosts but 1 (192.168.2.116 just won’t show).
ping 192.168.2.116 works flawlessly.
Nmap -sL 192.168.2.1/24 shows all hosts also the missing 192.168.2.116 ...
2
votes
1answer
3k views
What is insecure about the "insecure" option of NFS exports?
Why is it considered insecure for an NFS export to allow connections originating from high ports? Compare the manual:
exportfs understands the following export options:
secure
This option requires ...
0
votes
2answers
136 views
If HTTPS only runs on a single port, why is SYN flooding an issue?
I've read online that SYN flooding is when "the attacker sends repeated SYN packets to every port on the targeted server." However, HTTPS only runs on port 443. Therefore, why is it ...
0
votes
1answer
74 views
Change ettercap default port
Guys does anyone know how I can change the port that ettercap runs? I need it to run on port 8080.
When I try to run sudo ettercap -G it presents me with this error:
ERROR : 13, Permission denied
[/...
1
vote
0answers
70 views
Closed Port on Metaspoilt framework [closed]
I run Kali Linux OS on my PC and I use the Metasploit Framework. But I'm unable to access any ports when I run sudo netdiscover it always outputs that all ports are closed, even though Metasploit has ...
0
votes
0answers
59 views
How to reach the port 80 from a pivot machine
I have this lab setup:
kali (192.168.1.81) => Windows 10 (10.10.10.130) => Metasploitable (10.10.10.149)
I hacked Windows 10 first, then I make a pivot via SSF tools:
ssf.exe -g -F 22222 -L 10....
-1
votes
1answer
111 views
Do you have to be on the same WIFI for a Buffer Overflow attack to work?
I know how Buffer Overflows work but in order to do them do you have to be on the same WIFI as your victim. You need to send a packet to a specific device on a specific port. Therefore, unless port ...
0
votes
0answers
256 views
Android Smart TV open ports
Can anyone say if it is normal for an Android Smart TV to have these open ports?
sudo nmap -p 1-65535 192.168.1.2
PORT STATE SERVICE REASON
1925/tcp open discovery-port syn-ack ttl 64
...
0
votes
2answers
342 views
is there a way to close 22 ssh port from public, ubuntu?
I am using putty and private key to access my development server. I used Nmap online port scanner, to see which ports are visible to the public, and in fact, the 22 is open.
My question is, is it ...
2
votes
1answer
120 views
Docker container exposed port vulnerabilities on Debian server?
I'm configuring a Debian (Stretch) webserver to run docker containers for socks requests. So, the application would be able to authenticate (on port 1080) with the Dante server running inside the ...
0
votes
1answer
80 views
Estimate the number of host computers on the private network by port scanning
If we have a private network connected to the Internet with NAT, how can an attacker estimate the number of host computers in network using port scanning?
For both possible modes, the attacker inside ...
11
votes
2answers
3k views
Security implications of granting non-root access to privileged ports (<1024)
Lots of solutions to this problem e.g. here and here but in order to decide which is best I'd need to know more about the security implications of each solution (or at least in general).
My context: I'...
1
vote
1answer
67 views
What is the threat/risk difference in opening multiple ports on one physical NIC on a home server vs creating VLANs and opening ports on each VLAN?
I have a single home server with a single NIC. I intend to run numerous services -- some will be internet exposed, some will not. I don't know if I am going to run them as VMs or Docker container but ...
0
votes
1answer
169 views
What's this port? [closed]
Listing all the ports currently in use on my mac running $ sudo lsof -i -n -P | grep TCP, I see six entries starting with a weird-looking string of "2BUA8C4S2".
A web search for that string ...
2
votes
1answer
415 views
scan forwarded ports with OpenVAS/GVM?
I'm currently learning about network security and came across a problem, maybe I'm just missing something obvious but I'll try to explain my environment:
I have a Kali Linux VM connected to the WAN ...
0
votes
1answer
188 views
Intensive 586 (ms-shuttle) port scan/exploit/hacking attempts
Recently i wanted to play a bit with TCP/UDP networking (and touch some custom HTTP server impl) on C# and found out that i'm getting requests from totally unknown dudes, such as this one:
FROM: [::...
1
vote
0answers
137 views
Is port scanning used by software for legitimate reasons?
Does normal network traffic sent out by software or anything else use port scanning for legitimate reasons?
I'm using psad on my linux server and am unsure if setting the auto-ban IP feature on danger ...
-1
votes
2answers
394 views
What are the advantages of port scanning?
It seems like all the google results to this question answer what port scanning is, but go into little detail about how a pentester or hacker could use the information about what ports a network has ...
0
votes
1answer
66 views
Can anyone tell me at this platform that what is the difference between filtered ports and blocked ports? [duplicate]
please help me out, I am confused in this.
1
vote
1answer
207 views
Is it safe to expose port 22 on a database VM? [closed]
I have seen many answers to this question in different scenarios but I am still unsure of the actual answer.
I have a VM in the cloud (Azure), which will be hosting my production database. Is it safe ...
1
vote
3answers
471 views
Is there a possible security advantage to using a non standard port for ssl/https?
There are documented (albeit debated) advantages to using a non standard port for SSH.
I also read in various places about using a non-standard port for https (e.g. 8443). Is there a possible ...
0
votes
2answers
710 views
Nmap scanning with and without proxychains has different behaviour
I'm doing a nmap scan to my own machine to my own machine. First of all I set the port 333 to listen with this command sudo nc -lvnp 333
On the other terminal I run sudo nmap -O -sV -p 0-65535 IP ...
1
vote
1answer
1k views
Why can I access the internet with all ports closed on firewall? [closed]
For the heck of it I wanted to see how much I could close down my router from the rest of the internet. I was hoping turning on the firewall, removing any port forwarding and turning off UPnP would ...
0
votes
0answers
138 views
Very odd traffic - is it legit?
While troubleshooting an unrelated network problem, I noticed an interesting pattern on one of our networks for the last few days (at least). Before crying wolf, I wanted to see if somebody here may ...
0
votes
1answer
96 views
Attacking through an open but not listened port [duplicate]
Let us say, we open a port, say port 123, so that upon listening, an application on the server can receive incoming packets through the port 123.
If there is no way that an inside application on the ...
1
vote
1answer
14k views
Microsoft DS vulnerability?
I heard that Microsoft DS is a port that is commonly used by hackers to hack computers due to its ability to transfer files.
How do they transfer files with Microsoft DS?
Do they need an exploit to ...
-1
votes
3answers
10k views
Is TCP Port 80 (HTTP) vulnerable?
I heard hackers' top ports to hack computers through are port 80 and port 443. How do they do this though aren't port 80 and port 443 just for HTTP requests such as GET, POST?
1
vote
2answers
329 views
Will blocking outgoing traffic from port 80 and only allowing port 443 from my home network lead to more security?
Is blocking outgoing HTTP connections from a home network and only allowing HTTPS
connections reasonable? Will it reduce the chances of a man in the middle attack?
5
votes
1answer
432 views
Is it security risk to host CS:GO server on my PC?
I have quite good hardware in my PC and an optic fiber connection. I opened a CS:GO (Counter Strike Global Offensive) server on it, and made it public. The IP for connecting to this server is my ...
0
votes
0answers
107 views
Is it a Bad Idea™ to open all IPv6 ports for devices in an isolated guest network?
At home I have a dual-stack IPv4/IPv6 broadband connection, and I also have a wireless access point. The access point currently bridges all traffic into my LAN, which is not segmented in any way, so ...
0
votes
1answer
56 views
Is my server safe from remote hackers if I only allow 1 port and 1 service behind it which only hashs incoming bytes stream & send the hash key back? [duplicate]
I have a python script ,which accepts an incoming connection, reads from the byte stream ,hash it (I'm pretty sure the hash function itself can't be exploited) ,sends the hash key back ,then closes ...
0
votes
2answers
162 views
Is it safe to have an opened port on my PC with a proxy server listening?
I have a single port open for my own proxy server. All other ports are closed. Is it safe for my PC? Even if my port will keep getting bombed by hackers could my PC be exposed to them? There is no ...
1
vote
1answer
4k views
How to only display open ports
I'm very new to Nmap. I'm using Nmap to find open ports of an IP by this command:
nmap -v -Pn -p 1-100 "$ip" -oG -
Here is the output:
Host: IP
Ports:
6/closed/tcp/unknown
19/closed/tcp/chargen
20/...
0
votes
0answers
35 views
How to secure an open port and public IP address when clients must connect to it [duplicate]
I do not have a lot of experience in networking, however, I have built a live-chat application using socket.io and nodeJS. In order to do this, I had to open a port to allow other networks to connect. ...
2
votes
2answers
138 views
Risks of leaving my Redis port open and unsecure?
I left port 6005 open on a server of mine. Currently, if the server goes down, it won't be much of a loss. But my port 6005 is open for Redis queues and I don't necessarily want to have deal with it ...
4
votes
2answers
1k views
Why OpenVAS does not find all open ports compared to Nmap?
I recently launched a system discovery scan with OpenVAS to an IP from my net to compare its results to Nmap. As you can see in the image OpenVAS does not find all the ports Nmap does.
Both scans ...
1
vote
1answer
4k views
What ports should be closed in windows 10?
How can I close ports in windows 10 and what ports are unnecessary to be open? How do I find these open ports to close?
Also if I close a specific port on windows 10 do I have to close the outbound ...
0
votes
1answer
87 views
What's the point of using a firewall to filter ports if they are closed by default? [duplicate]
I'm just learning most of this stuff so bare with me;
Using a firewall service such as iptables, is there a point in filtering/blocking a port that is not in use meaning it's closed by default?
1
vote
2answers
491 views
Security of port forwarding when the target is turned off
I recently set up a server from an old computer case. I use docker to install and use different services on different ports and I would like to access some services from outside of my house.
I have a ...
0
votes
1answer
130 views
pycharm opening ports [closed]
By running a simple port scan, I have noticed that pycharm is opening three ports on the machines it is installed on.
Pycharm is a great tool for developer, but it seems fairly awful to me on the ...
0
votes
1answer
184 views
How to make VPS more secure with UFW?
I have 3 VPS based on Ubuntu 18.04 server OS and would like to open particular ports on each servers.
The ports, that I would like to open are:
Then let's take a look on the environment:
As you ...
0
votes
2answers
480 views
Nessus detect more open ports than nmap
I scan my site via namp , I only see 3 ports open.
nmap -sV {ip}
Starting Nmap 7.80 ( https://nmap.org ) at 2020-01-25 09:42 EST ...
