New answers tagged ports
0
No. The question is not the number of open ports but which services are behind these ports and the security of these services. Thus, it is sufficient for an attacker if there is only one open port which one service but this service is exploitable.
1
First of all, if a port is opened it's usually because there's a service listening on that port which responds using whatever protocol it is based on.
The first question is: What kind of service responds on that port, and what protocol does it respond with?
The second question is: Are there known vulnerabilities regarding to that particular service or ...
0
While your setup is not fully clear I assume that you have a proxy server running locally on your PC which is reachable from outside the PC - because otherwise there would no need to open a port on the PC for incoming connections. Assuming that the hacker can reach your PC in the first place (i.e. when being in the same network, machine directly reachable ...
3
Nmap has the option --open, which will filter out all the other potential states. If you are scanning under Linux, you could also use grep to achieve a very similar result.
Here is what the man pages have to say about it:
--open (Show only open (or possibly open) ports)
Sometimes you only care about ports you can actually connect to (open
ones), ...
1
In addition to your data being exposed, allowing the open internet to access a misconfigured service could allow an attacker to establish a foothold on the server. Attacks have been carried out against redis that add an attackers SSH key to the redis user's authorized_keys file, granting the attacker SSH access.
See this answer for links to other resources ...
1
If someone can connect to the same network segment they can view your redis queries and extract the credentials you are using. after that they have full access to the redis database, and may be able to perform privilege escalation attacks by modifying session data etc... if not they'll have to guess the credentials first.
Top 50 recent answers are included
