Questions tagged [ports]
In computer networking a port is a software construct serving as a communications endpoint in a computer's host OS.
384
questions
0
votes
0answers
24 views
What are the ports that needs enhanced monitoring for suspicious activity at Security Operations Centre - SOC? [closed]
The ports that needs enhanced monitoring for suspicious activity at Security Operations Centre - SOC from an enterprise organisation point of view like SSH , RDP.
0
votes
1answer
58 views
How to check if my ports are exposed to the internet
[Crossposting from SO]
I am trying to make a port scanner in Python and trying to list which all ports are accessible by anyone remotely.
Using the socket.connect_ex package, I was able to check which ...
0
votes
0answers
32 views
nmap -sn different results than - sL (-sL shows missing host from -sn)
Executing nmap -sn 192.168.2.1/24 gives all hosts but 1 (192.168.2.116 just won’t show).
ping 192.168.2.116 works flawlessly.
Nmap -sL 192.168.2.1/24 shows all hosts also the missing 192.168.2.116 ...
0
votes
1answer
91 views
What is insecure about the “insecure” option of NFS exports?
Why is it considered insecure for an NFS export to allow connections originating from high ports? Compare the manual:
exportfs understands the following export options:
secure
This option requires ...
0
votes
2answers
91 views
If HTTPS only runs on a single port, why is SYN flooding an issue?
I've read online that SYN flooding is when "the attacker sends repeated SYN packets to every port on the targeted server." However, HTTPS only runs on port 443. Therefore, why is it ...
0
votes
1answer
35 views
Change ettercap default port
Guys does anyone know how I can change the port that ettercap runs? I need it to run on port 8080.
When I try to run sudo ettercap -G it presents me with this error:
ERROR : 13, Permission denied
[/...
1
vote
0answers
47 views
Closed Port on Metaspoilt framework [closed]
I run Kali Linux OS on my PC and I use the Metasploit Framework. But I'm unable to access any ports when I run sudo netdiscover it always outputs that all ports are closed, even though Metasploit has ...
0
votes
0answers
42 views
How to reach the port 80 from a pivot machine
I have this lab setup:
kali (192.168.1.81) => Windows 10 (10.10.10.130) => Metasploitable (10.10.10.149)
I hacked Windows 10 first, then I make a pivot via SSF tools:
ssf.exe -g -F 22222 -L 10....
-1
votes
1answer
67 views
Do you have to be on the same WIFI for a Buffer Overflow attack to work?
I know how Buffer Overflows work but in order to do them do you have to be on the same WIFI as your victim. You need to send a packet to a specific device on a specific port. Therefore, unless port ...
0
votes
0answers
70 views
Android Smart TV open ports
Can anyone say if it is normal for an Android Smart TV to have these open ports?
sudo nmap -p 1-65535 192.168.1.2
PORT STATE SERVICE REASON
1925/tcp open discovery-port syn-ack ttl 64
...
0
votes
2answers
92 views
is there a way to close 22 ssh port from public, ubuntu?
I am using putty and private key to access my development server. I used Nmap online port scanner, to see which ports are visible to the public, and in fact, the 22 is open.
My question is, is it ...
1
vote
1answer
76 views
Docker container exposed port vulnerabilities on Debian server?
I'm configuring a Debian (Stretch) webserver to run docker containers for socks requests. So, the application would be able to authenticate (on port 1080) with the Dante server running inside the ...
0
votes
1answer
57 views
Estimate the number of host computers on the private network by port scanning
If we have a private network connected to the Internet with NAT, how can an attacker estimate the number of host computers in network using port scanning?
For both possible modes, the attacker inside ...
11
votes
2answers
3k views
Security implications of granting non-root access to privileged ports (<1024)
Lots of solutions to this problem e.g. here and here but in order to decide which is best I'd need to know more about the security implications of each solution (or at least in general).
My context: I'...
1
vote
1answer
51 views
What is the threat/risk difference in opening multiple ports on one physical NIC on a home server vs creating VLANs and opening ports on each VLAN?
I have a single home server with a single NIC. I intend to run numerous services -- some will be internet exposed, some will not. I don't know if I am going to run them as VMs or Docker container but ...
0
votes
1answer
109 views
What's this port? [closed]
Listing all the ports currently in use on my mac running $ sudo lsof -i -n -P | grep TCP, I see six entries starting with a weird-looking string of "2BUA8C4S2".
A web search for that string ...
2
votes
1answer
170 views
scan forwarded ports with OpenVAS/GVM?
I'm currently learning about network security and came across a problem, maybe I'm just missing something obvious but I'll try to explain my environment:
I have a Kali Linux VM connected to the WAN ...
0
votes
1answer
130 views
Intensive 586 (ms-shuttle) port scan/exploit/hacking attempts
Recently i wanted to play a bit with TCP/UDP networking (and touch some custom HTTP server impl) on C# and found out that i'm getting requests from totally unknown dudes, such as this one:
FROM: [::...
1
vote
0answers
87 views
Is port scanning used by software for legitimate reasons?
Does normal network traffic sent out by software or anything else use port scanning for legitimate reasons?
I'm using psad on my linux server and am unsure if setting the auto-ban IP feature on danger ...
-1
votes
2answers
198 views
What are the advantages of port scanning?
It seems like all the google results to this question answer what port scanning is, but go into little detail about how a pentester or hacker could use the information about what ports a network has ...
0
votes
1answer
49 views
Can anyone tell me at this platform that what is the difference between filtered ports and blocked ports? [duplicate]
please help me out, I am confused in this.
0
votes
1answer
85 views
Is it safe to expose port 22 on a database VM? [closed]
I have seen many answers to this question in different scenarios but I am still unsure of the actual answer.
I have a VM in the cloud (Azure), which will be hosting my production database. Is it safe ...
1
vote
3answers
209 views
Is there a possible security advantage to using a non standard port for ssl/https?
There are documented (albeit debated) advantages to using a non standard port for SSH.
I also read in various places about using a non-standard port for https (e.g. 8443). Is there a possible ...
0
votes
2answers
300 views
Nmap scanning with and without proxychains has different behaviour
I'm doing a nmap scan to my own machine to my own machine. First of all I set the port 333 to listen with this command sudo nc -lvnp 333
On the other terminal I run sudo nmap -O -sV -p 0-65535 IP ...
1
vote
1answer
929 views
Why can I access the internet with all ports closed on firewall? [closed]
For the heck of it I wanted to see how much I could close down my router from the rest of the internet. I was hoping turning on the firewall, removing any port forwarding and turning off UPnP would ...
0
votes
0answers
31 views
Using Windows XP to only read email [duplicate]
Let's settle the obvious: Windows XP is a very obsolete operating system, running it as the main OS on a computer connected to the internet is not a good idea.
But, if say, you would like to run it ...
0
votes
0answers
96 views
Very odd traffic - is it legit?
While troubleshooting an unrelated network problem, I noticed an interesting pattern on one of our networks for the last few days (at least). Before crying wolf, I wanted to see if somebody here may ...
0
votes
1answer
85 views
Attacking through an open but not listened port [duplicate]
Let us say, we open a port, say port 123, so that upon listening, an application on the server can receive incoming packets through the port 123.
If there is no way that an inside application on the ...
1
vote
1answer
7k views
Microsoft DS vulnerability?
I heard that Microsoft DS is a port that is commonly used by hackers to hack computers due to its ability to transfer files.
How do they transfer files with Microsoft DS?
Do they need an exploit to ...
-1
votes
3answers
5k views
Is TCP Port 80 (HTTP) vulnerable?
I heard hackers' top ports to hack computers through are port 80 and port 443. How do they do this though aren't port 80 and port 443 just for HTTP requests such as GET, POST?
1
vote
2answers
167 views
Will blocking outgoing traffic from port 80 and only allowing port 443 from my home network lead to more security?
Is blocking outgoing HTTP connections from a home network and only allowing HTTPS
connections reasonable? Will it reduce the chances of a man in the middle attack?
5
votes
1answer
358 views
Is it security risk to host CS:GO server on my PC?
I have quite good hardware in my PC and an optic fiber connection. I opened a CS:GO (Counter Strike Global Offensive) server on it, and made it public. The IP for connecting to this server is my ...
0
votes
0answers
84 views
Is it a Bad Idea™ to open all IPv6 ports for devices in an isolated guest network?
At home I have a dual-stack IPv4/IPv6 broadband connection, and I also have a wireless access point. The access point currently bridges all traffic into my LAN, which is not segmented in any way, so ...
0
votes
1answer
47 views
Is my server safe from remote hackers if I only allow 1 port and 1 service behind it which only hashs incoming bytes stream & send the hash key back? [duplicate]
I have a python script ,which accepts an incoming connection, reads from the byte stream ,hash it (I'm pretty sure the hash function itself can't be exploited) ,sends the hash key back ,then closes ...
0
votes
2answers
121 views
Is it safe to have an opened port on my PC with a proxy server listening?
I have a single port open for my own proxy server. All other ports are closed. Is it safe for my PC? Even if my port will keep getting bombed by hackers could my PC be exposed to them? There is no ...
1
vote
1answer
716 views
How to only display open ports
I'm very new to Nmap. I'm using Nmap to find open ports of an IP by this command:
nmap -v -Pn -p 1-100 "$ip" -oG -
Here is the output:
Host: IP
Ports:
6/closed/tcp/unknown
19/closed/tcp/chargen
20/...
0
votes
0answers
35 views
How to secure an open port and public IP address when clients must connect to it [duplicate]
I do not have a lot of experience in networking, however, I have built a live-chat application using socket.io and nodeJS. In order to do this, I had to open a port to allow other networks to connect. ...
2
votes
2answers
105 views
Risks of leaving my Redis port open and unsecure?
I left port 6005 open on a server of mine. Currently, if the server goes down, it won't be much of a loss. But my port 6005 is open for Redis queues and I don't necessarily want to have deal with it ...
3
votes
1answer
739 views
Why OpenVAS does not find all open ports compared to Nmap?
I recently launched a system discovery scan with OpenVAS to an IP from my net to compare its results to Nmap. As you can see in the image OpenVAS does not find all the ports Nmap does.
Both scans ...
1
vote
1answer
3k views
What ports should be closed in windows 10?
How can I close ports in windows 10 and what ports are unnecessary to be open? How do I find these open ports to close?
Also if I close a specific port on windows 10 do I have to close the outbound ...
0
votes
1answer
74 views
What's the point of using a firewall to filter ports if they are closed by default? [duplicate]
I'm just learning most of this stuff so bare with me;
Using a firewall service such as iptables, is there a point in filtering/blocking a port that is not in use meaning it's closed by default?
0
votes
2answers
323 views
Security of port forwarding when the target is turned off
I recently set up a server from an old computer case. I use docker to install and use different services on different ports and I would like to access some services from outside of my house.
I have a ...
0
votes
1answer
93 views
pycharm opening ports [closed]
By running a simple port scan, I have noticed that pycharm is opening three ports on the machines it is installed on.
Pycharm is a great tool for developer, but it seems fairly awful to me on the ...
0
votes
1answer
124 views
How to make VPS more secure with UFW?
I have 3 VPS based on Ubuntu 18.04 server OS and would like to open particular ports on each servers.
The ports, that I would like to open are:
Then let's take a look on the environment:
As you ...
0
votes
2answers
341 views
Nessus detect more open ports than nmap
I scan my site via namp , I only see 3 ports open.
nmap -sV {ip}
Starting Nmap 7.80 ( https://nmap.org ) at 2020-01-25 09:42 EST ...
1
vote
0answers
170 views
Is there an updated (non-Nmap) top 100 or top 1000 common ports list?
I know Nmap has nmap-services file which gives us the list of top 1000 ports/services found on the Internet. But this list seems to be outdated, as the Nmap top 1000 list doesn't include several ...
0
votes
0answers
102 views
Open Ports at ISPs Gateway
I am working to set up OpenVPN access to my home network. To do this, I had to contact my ISP, because they had the necessary port blocked at the Gateway/Router that I do not have access to.
In my ...
1
vote
2answers
106 views
Security of using DHCP and non-standard ports for medical devices
I recently came across this comment written in a journal article.
Lastly, medical apparatus are expected to use Dynamic Host Configuration Protocol (DHCP) for the allocation of their IP ...
2
votes
2answers
1k views
Is there practical risk to having UDP ports open?
I understand that everything is potentially an attack vector, but I would like to ask a practical question about UDP ports
Suppose you're pentesting some small organisation and you found a couple of ...
0
votes
1answer
134 views
Why should I use firewall to block ports with no running services? [duplicate]
A firewall is for blocking / limiting access to specific service / port.
I know that it can be useful for allowing only certain IPs to a port (for example I don't want to have SSH open for the whole ...
