In computer networking a port is a software construct serving as a communications endpoint in a computer's host OS.
1
vote
3answers
47 views
Exploiting through a filtered port
I'm doing some pentesting against a machine the lecturer set up in the lab. NMAP shows port 445 to be filtered and Nessus confirms the ms08_067 vulnerability is present on that machine.
I tried ...
0
votes
1answer
68 views
Is there a way of determining if tor is running on a remote machine?
In most of the companies, IT guys block some sites and by using TOR or other VPNs people walk around these blocks and gain access to blocked content.
My question is, assuming TOR is running on ...
0
votes
0answers
50 views
What does Msgsrvr and Scientia-ssdb do?
I'm having a task in a computer security class in school where I'm supposed to scan a host for open ports in order to find out what services is being run there. I have found out (among other things) ...
1
vote
1answer
29 views
Does connection that use 0.0.0.0 in Foreign Address secured?
When I run my application on Centos the specific process opens port that listens for connections from localhost, but uses 0.0.0.0 in Foreign Address. Is it secured?
netstat -plunt
Active Internet ...
0
votes
1answer
145 views
Can closing port 80 lead to more security?
If a website is running on HTTPS only, is it reasonable to close port 80 of the web server and only leave port 443 open? Does this action provide more security for the website?
1
vote
3answers
149 views
Why P2P need portforwarding when behind NAT? [closed]
Correct me if I'm wrong, but for a node to participate in peer-to-peer, if it's behind a NAT, it most port forward to be able to connect. Why is the port forwarding necessary? I know there's ...
0
votes
1answer
190 views
Netgear WNDR4000 open port 53
Why is port 53 open on the WAN side of the router? And more importantly how do I close it?
Port 53 is not one of my forwarded ports.
Discovered by doing
nmap -pT:1-64 <my-external-IP> -Pn
...
-2
votes
2answers
330 views
Port list according to vulnerability [closed]
I'm looking for a list of ports sorted according to the number of vulnerability you can find for that specific port (considering of course, the service installed in the default port).
Example: ...
2
votes
3answers
214 views
Why block network ports?
There was another good question here on why you should block outgoing traffic: Why block outgoing network traffic with a firewall?
But I was hoping to get an answer on why it is a good idea to block ...
2
votes
5answers
469 views
Nmap reporting almost every port as open
I have noticed during some assesments when doing a TCP port scan, Nmap will report almost every port as open for a machine.
Using for example nmap -sS -PN -T4 target -p0-65535, over 20,000 ports will ...
0
votes
1answer
76 views
Is it possible to scan a remote host in another network if I know a port that is opened?
First of all, this question is not the same as is it possible to test out remote host by using nmap?, because on that question, the questioner is asking for something impossible due to NAT's nature.
...
0
votes
2answers
288 views
Is Port Forwarding for bit torrent risky?
I have found that my connection decreased suddenly when downloading torrents. I diagnosed it with bit torrent and the answer is that i should do port forwarding on my modem/router! Is it risky?
1
vote
1answer
76 views
Hardening Services, Ports on OSX
People boast about OSX Security, yet I find it very hard to find a comprehensive manual in regards to any equivalent Services and the ports they use. I am aware of lanchd and launchctl and Lingon is ...
0
votes
1answer
78 views
Understanding a Zenmap output
I'm running Zenmap on my Windows 7 laptop. I ran an intense scan with UDP targeting my router 192.168.1.1.I realize that I'm probing into the back end of the router from the inside and that any open ...
0
votes
1answer
107 views
Open ports on mac. Safe?
My friend is currently running the default firewall on his mac with "Block all incoming connection" (except the basic ones like 80). I just scanned his mac for open ports and I found the following:
...
2
votes
2answers
107 views
Hide logging server from DMZ
I have a server on my DMZ whichs relays syslog and OcsInventory messages to a server on a vlan for logging servers.
In order to allow the packets to go through I must allow port 80 (OcsInventory) and ...
0
votes
1answer
50 views
Security risks monitoring JMX
I am doing an internship at a big company wich create industrial automated systems for some big company's. They want me to design a way to monitor all the Java based control modules. Now I am going to ...
0
votes
2answers
59 views
Can I communicate with a wireless device, without logging in the same LAN?
Suppose there are three devices:
WPA2 protected AP
linux laptop, accessing internet through tha AP
linux laptop, not connected to the AP
I own the third device and do not know the AP's password. I ...
1
vote
4answers
716 views
How to make nmap list an unfiltered port?
I have a host that is NAT'ed and I have opened a single port in my router so the host is reachable by the external world. I tested if it was reachable by running a service and connecting to it ...
0
votes
1answer
335 views
In-office Flask app on port 80 - is it safe? [closed]
The title says it all; I'm just serving data to coworkers as a courtesy via a series of single-page apps that I basically consolidated under Flask, serving Jinja templates. Presently, I have Apache ...
6
votes
2answers
2k views
What are the security implications of enabling UPnP in my home router?
I found port forwarding entries in home router that I haven't manually configured. Is that because of UPnP?
Are applications simply able to tell the router to forward ports on their own? Are there ...
-7
votes
3answers
136 views
What are ports? [closed]
I just wanted to know what are ports. Can someone explain to me what a port is?
7
votes
1answer
314 views
different portscan tools give different results
I have different results as of my open TCP ports. When using nmap -sS 127.0.0.1, I get some 5 usual open ports, but when using osx built-in tool as stroke, I get those 5 ports plus 5 extra ports. How ...
2
votes
1answer
353 views
Why are some ports reported as closed by nmap?
I was scanning a machine from inside the same LAN which is running and up to date Windows XP Home Edition which I suspect may be running some malware.
The target machine has an up to date antivirus ...
0
votes
2answers
459 views
Vulnerability of the open port
I'm installing service on the cloud machine and I was wondering on port vulnerabilities for my customers.
My service which lives on server A (often on a customer site) needs to access server B ...
-1
votes
1answer
531 views
How to find IP Addresses that have been attacking my Computer Ports ? [closed]
I am a newbie at Info Sec, and wanted to know which IP addresses are sources of attack traffic.
Can I also find out which ports are being attacked?
Can this information be found in windows firewall? ...
2
votes
0answers
48 views
Could you attack a port without knowing what service was listening? [duplicate]
A lot of discussion I see suggests that changing default ports for services is just "security by obscurity" and is easily defeated by scanning for open ports.
My question is this, though, if the ...
1
vote
1answer
814 views
Vulnerability by leaving an open port in a pc
I have the following set-up.
Home pc ---reverse ssh tunnel---> to linux server
The reverse ssh tunnel is set-up so that on my home pc, port 22 is open, but I have nothing currently listening on that ...
-4
votes
1answer
1k views
DoSing my Home Network with only a Public IP address [closed]
+--------------------------------------------------------+
| Client Host Name |.. IP Address ..|.... MAC Address ...|
| Desktop-Home ....| 192.168.1.100 | 00:19:D1:EA:03:68 |
| GT-S5380K ...
1
vote
4answers
320 views
SYN scan victim sending back RST
I'm confused on the case of SYN scan and closed ports (the case of open ports makes sense). So, the attacker sends a ~40 byte SYN packet, a "closed port" would send a RST packet back to the attacker ...
-1
votes
2answers
379 views
Keyloggers and Email Accounts [duplicate]
This morning, I was experimenting with some keyloggers and noticed that they have a feature to send e-mails to the attacker.
How can these e-mails be intercepted? Let us say that I have a packet ...
0
votes
1answer
572 views
What are the ports used by Online Email Accounts such as Yahoo Mail, Gmail, etc.?
Let us say that I send an email using Yahoo Mail or GMail. Can this email be intercepted using a packet sniffer?
On which port does the email travel? HTTP, SMTP, POP3?
4
votes
5answers
650 views
How to bypass Nmap blockage?
I rent a server, and my provider seems to be blocking nmap. Is there any other tools I could use to test my home network from the outside?
Also, does blocking nmap on a network provide any security?
...
1
vote
2answers
325 views
Spike in TCP port 5904 activity - what for?
There is an 'Internet Weather Report' on the Threat!Traq video blog by AT&T security researchers. In the March 14th broadcast, at around 31 minutes in, they mention an increase of scanning ...
0
votes
3answers
355 views
How can i reject connection from LAN and WAN to some ports?
Scanning with nmap, I discovered that there are 3 open ports on my server. I want to deny any access to these ports from any machine, regardless of whether it is on the same LAN or via WAN. How do I ...
1
vote
2answers
3k views
How to configure iptables for must open ports?
On my machine there are web services which can be accessed from any PC connected to the same network segment (WiFi for example). I want to use IPtables on the machine to prevent any web services from ...
0
votes
2answers
131 views
Security implications of forwarding ports 1-10000 on Airport Express?
Today I found that ports 1-10000 were being forwarded on an Airport Express that I as well as a fair number of other people share. This was setup by another user. There are multiple machines and ...
2
votes
3answers
2k views
Is it really better to use port 80 or 443 for outgoing traffic in order to bypass user firewall?
I recently created a reverse connection shell in C#. I tested it with some computers and I noticed that some computers connected back correctly and I established connection with them but another ...
0
votes
1answer
473 views
how is my router being modified to include WAN port-binding items for Teredo and Spotify [closed]
My router's configuration app (browser-interface) has a page for Virtual Server. It has entries I did not create, at least not intentionally using the interface, for Teredo, Skype, Spotify, uTorrent.
...
3
votes
3answers
1k views
Is there is a way to lock my USB port over the device physically?
Is there is a way to lock my USB port over the device physically ?
For example I am connecting the USB mouse and keyboard on an public computer but I do not want anyone to remove them physically. I ...
5
votes
2answers
800 views
How should an outgoing connection white-list be created?
I see my previous question was closed as duplicate of Why block outgoing network traffic with a firewall?. The answers that everyone agree with mention the value of blocking outgoing connections (to ...
2
votes
1answer
267 views
How should I audit and monitor shared TCP ports in Windows?
Windows has a feature called .NET TCP Port Sharing which allows different .NET applications to share the same TCP/IP port.
I would like to monitor the source and destination connections of each ...
3
votes
2answers
96 views
Auditing Existing Socket Connection
Is there any way to interact with a program's socket traffic without installing Winpcap?
I understand that the one listening program per port is a restriction regarding TCP/IP, but I guess I'm more ...
1
vote
2answers
1k views
When can closing port 80 be a problem?
Since port 80 is typically used for HTTP must a web server have it open or otherwise configure links to specify a different port (e.g. http://www.example.com:8080/mypage.html)? For example this site ...
3
votes
2answers
1k views
If a port is closed how come you can still use it?
What does it actually mean for a port to be closed or stealthed? According to tests I've run all my ports (tested) are stealthed but clearly I can still use the internet. Also are the terms "blocked" ...
0
votes
2answers
257 views
can a backdoor executable be used on an occupied port?
Suppose I am doing a penetration test on a network that has a firewall that blocks all ports except 80, 110, and 443. I want to use a metasploit reverse-TCP backdoor executable written in msfpayload ...
4
votes
3answers
1k views
How to figure out which open ports or services are insecure?
We have around one thousand machines on internet. We do port scanning with nmap, and find many ports open on these machines. Sometime we found administrative website using HTTP instead of HTTPS, we ...
1
vote
2answers
1k views
How to check if a port can be accessed from the outside
I want to be sure that the firewall protecting the intranet is effectively rejecting/granting access to a port. I have no access to the firewall nor any other external machine.
Is that possible at ...
4
votes
2answers
490 views
Is it good practice to manually lock down ports on each host
We have a strong perimeter firewall. Would it make sense to still use IPTables on each host to hard block any and all ports except for the ones that are needed (DNS, 80 for the web server, nagios ...
-1
votes
2answers
1k views
Port scanning legal or not? [closed]
Is port scanning legal ?
In which countries ?
my option :
I think port scanning is like a short-walk( or a long-walk) in the neighbourhood, just curious about neighbours are up to.
I think that ...
