PDA

Просмотр полной версии : Nmap открытые порты


disbeliever
12.09.2012, 01:00
Всем привет,

Изучаю взлом через порты. На неком ресурсе нашел вот такой список открытых портов:

source:


PORT STATE SERVICE VERSION

1/tcp open tcpwrapped

4/tcp open tcpwrapped

6/tcp open tcpwrapped

9/tcp open tcpwrapped

13/tcp open tcpwrapped

19/tcp open tcpwrapped

21/tcp open ftp ProFTPD 1.3.3c

22/tcp open ssh OpenSSH 4.3 (protocol 2.0)

| ssh-hostkey: 1024 9d:00:87:bb:91:ae:5c:57:29:d9:c1:71:c2:ac:c5:30 (DSA)

|_2048 db:84:52:fd:8c:e2:95:22:eb:77:d6:07:00:1e:a1:07 (RSA)

24/tcp open tcpwrapped

25/tcp filtered smtp

26/tcp open tcpwrapped

37/tcp open tcpwrapped

43/tcp open tcpwrapped

49/tcp open tcpwrapped

53/tcp open domain ISC BIND 9.3.6-4.P1.el5_5.3

| dns-nsid:

|_ bind.version: 9.3.6-P1-RedHat-9.3.6-4.P1.el5_5.3

70/tcp open tcpwrapped

80/tcp open http nginx

|_http-methods: GET HEAD POST OPTIONS

|_http-title: Apache HTTP Server Test Page powered by CentOS

81/tcp open tcpwrapped

83/tcp open tcpwrapped

85/tcp open tcpwrapped

89/tcp open tcpwrapped

99/tcp open tcpwrapped

100/tcp open tcpwrapped

106/tcp open pop3pw poppassd

110/tcp open pop3 Courier pop3d

|_pop3-capabilities: USER IMPLEMENTATION(Courier Mail Server) UIDL APOP TOP OK(K Here s what I can
do
) STLS PIPELINING LOGIN-DELAY(10)

111/tcp open rpcbind (rpcbind V2) 2 (rpc
#100000)
| rpcinfo:

| program version port/proto service

| 100000 2 111/tcp rpcbind

| 100000 2 111/udp rpcbind

| 100024 1 940/udp status

|_ 100024 1 943/tcp status

119/tcp open nntp?

125/tcp open tcpwrapped

143/tcp open imap Courier Imapd (released 2004)

|_imap-capabilities: completed ACL2=UNION THREAD=ORDEREDSUBJECT QUOTA OK AUTH=PLAIN THREAD=REFERENCES STARTTLSA0001 UIDPLUS CAPABILITY SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN

144/tcp open tcpwrapped

146/tcp open tcpwrapped

163/tcp open cmip-man?

179/tcp open bgp?

212/tcp open anet?

222/tcp open rsh-spx?

255/tcp open unknown

259/tcp open esro-gen?

264/tcp open bgmp?

280/tcp open http-mgmt?

301/tcp open unknown

306/tcp open unknown

366/tcp open odmr?

406/tcp open imsp?

407/tcp open timbuktu?

416/tcp open silverplatter?

425/tcp open icad-el?

427/tcp open svrloc?

443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS))

|_http-title: Default Parallels Plesk Panel Page

| ssl-cert: Subject: commonName=www.dejavushop.com/organizationName=www.dejavushop.com/countryName=TR

| Issuer: commonName=RapidSSL CA/organizationName=GeoTrust, Inc./countryName=US

| Public Key
type
: rsa

| Public Key bits: 2048

| Not valid before: 2012-02-01 03:06:36

| Not valid after: 2013-02-02 21:03:27

| MD5: bcf3 8af8 d7fb 607f dcf1 8d7a b844 0284

|_SHA-1: 9490 6dac ca62 d553 2ccb d70a 6e9a 2aa7 99a9 2752

|_http-methods: GET HEAD POST OPTIONS

|_sslv2: server still supports SSLv2

|_http-favicon: Parallels Plesk Panel

444/tcp open snpp?

458/tcp open appleqtc?

464/tcp open kpasswd5?

465/tcp open ssl/smtp qmail smtpd

|_sslv2: server still supports SSLv2

| ssl-cert: Subject: commonName=plesk/organizationName=Parallels/stateOrProvinceName=Virginia/countryName=US

| Issuer: commonName=plesk/organizationName=Parallels/stateOrProvinceName=Virginia/countryName=US

| Public Key
type
: rsa

| Public Key bits: 2048

| Not valid before: 2007-01-22 22:25:47

| Not valid after: 2008-01-22 22:25:47

| MD5: 858c 4e6f 12c3 4d6c 8bf6 92ab ebb3 3f56

|_SHA-1: c168 5a5e 03ee 34f2 6ddd db2f 82f9 54c2 f435 0ca5

| smtp-commands: ns1.dejavushop.com, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, PIPELINING, 8BITMIME,

|_ qmail home page: http://pobox.com/~djb/qmail.html

497/tcp open retrospect?

513/tcp open login?

514/tcp open shell?

515/tcp open printer?

524/tcp open ncp?

541/tcp open uucp-rlogin?

544/tcp open kshell?

545/tcp open ekshell?

548/tcp open afp?

555/tcp open dsf?

563/tcp open tcpwrapped

587/tcp open smtp qmail smtpd

| smtp-commands: ns1.dejavushop.com, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, PIPELINING, 8BITMIME, STARTTLS,

|_ qmail home page: http://pobox.com/~djb/qmail.html

| ssl-cert: Subject: commonName=plesk/organizationName=Parallels/stateOrProvinceName=Virginia/countryName=US

| Issuer: commonName=plesk/organizationName=Parallels/stateOrProvinceName=Virginia/countryName=US

| Public Key
type
: rsa

| Public Key bits: 2048

| Not valid before: 2007-01-22 22:25:47

| Not valid after: 2008-01-22 22:25:47

| MD5: 858c 4e6f 12c3 4d6c 8bf6 92ab ebb3 3f56

|_SHA-1: c168 5a5e 03ee 34f2 6ddd db2f 82f9 54c2 f435 0ca5

593/tcp open http-rpc-epmap?

625/tcp open apple-xsrvr-admin?

631/tcp open ipp?

636/tcp open ldapssl?

648/tcp open rrp?

666/tcp open doom?

668/tcp open mecomm?

683/tcp open corba-iiop?

687/tcp open asipregistry?

691/tcp open resvc?

705/tcp open agentx?

720/tcp open unknown

726/tcp open unknown

749/tcp open kerberos-adm?

765/tcp open webster?

777/tcp open multiling-http?

783/tcp open spamassassin?

787/tcp open qsc?

800/tcp open mdbs_daemon?

873/tcp open rsync?

880/tcp open unknown

888/tcp open accessbuilder?

900/tcp open omginitialrefs?

901/tcp open samba-swat?

902/tcp open iss-realsecure?

911/tcp open xact-backup?

912/tcp open apex-mesh?

981/tcp open unknown

987/tcp open unknown

990/tcp open ftps?

992/tcp open telnets?

993/tcp open ssl/imap Courier Imapd (released 2004)

|_imap-capabilities: ACL2=UNIONA0001 THREAD=ORDEREDSUBJECT QUOTA completed AUTH=PLAIN THREAD=REFERENCES OK UIDPLUS CAPABILITY SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN

|_sslv2: server still supports SSLv2

| ssl-cert: Subject: commonName=plesk/organizationName=Parallels/stateOrProvinceName=Virginia/countryName=US

| Issuer: commonName=plesk/organizationName=Parallels/stateOrProvinceName=Virginia/countryName=US

| Public Key
type
: rsa

| Public Key bits: 2048

| Not valid before: 2007-01-22 22:25:47

| Not valid after: 2008-01-22 22:25:47

| MD5: 858c 4e6f 12c3 4d6c 8bf6 92ab ebb3 3f56

|_SHA-1: c168 5a5e 03ee 34f2 6ddd db2f 82f9 54c2 f435 0ca5

995/tcp open ssl/pop3 Courier pop3d

|_pop3-capabilities: USER LOGIN-DELAY(10) IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP OK(K Here s what I can
do
)

| ssl-cert: Subject: commonName=plesk/organizationName=Parallels/stateOrProvinceName=Virginia/countryName=US

| Issuer: commonName=plesk/organizationName=Parallels/stateOrProvinceName=Virginia/countryName=US

| Public Key
type
: rsa

| Public Key bits: 2048

| Not valid before: 2007-01-22 22:25:47

| Not valid after: 2008-01-22 22:25:47

| MD5: 858c 4e6f 12c3 4d6c 8bf6 92ab ebb3 3f56

|_SHA-1: c168 5a5e 03ee 34f2 6ddd db2f 82f9 54c2 f435 0ca5

|_sslv2: server still supports SSLv2

1000/tcp open cadlock?

1001/tcp open unknown

1002/tcp open windows-icfw?

1007/tcp open unknown

1009/tcp open unknown

1011/tcp open unknown

1021/tcp open exp1?

1022/tcp open exp2?

1023/tcp open netvenuechat?

1024/tcp filtered kdm

1028/tcp open unknown

1029/tcp open ms-lsa?

1030/tcp open iad1?

1031/tcp open iad2?

1032/tcp open iad3?

1033/tcp open netinfo?

1034/tcp open zincite-a?

1035/tcp open multidropper?

1036/tcp open nsstp?

1037/tcp open ams?

1038/tcp open mtqp?

1039/tcp open sbl?

1041/tcp open danf-ak2?

1043/tcp open boinc?

1045/tcp open fpitp?

1048/tcp open neod2?

1049/tcp open td-postman?

|_giop-info: ERROR

1050/tcp open java-or-OTGfileshare?

|_giop-info: ERROR

1051/tcp open optima-vnet?

1054/tcp open brvread?

1056/tcp open vfo?

1057/tcp open startron?

1060/tcp open polestar?

1061/tcp open kiosk?

1064/tcp open jstel?

1065/tcp open syscomlan?

1066/tcp open fpo-fns?

1069/tcp open cognex-insight?

1070/tcp open gmrupdateserv?

1071/tcp open bsquare-voip?

1073/tcp open bridgecontrol?

1074/tcp open warmspotMgmt?

1076/tcp open sns_credit?

1077/tcp open imgames?

1079/tcp open asprovatalk?

1080/tcp open socks?

1082/tcp open amt-esd-prot?

1083/tcp open ansoft-lm-1?

1084/tcp open ansoft-lm-2?

1086/tcp open cplscrambler-lg?

1087/tcp open cplscrambler-in?

1089/tcp open ff-annunc?

1092/tcp open obrpd?

1093/tcp open proofd?

1094/tcp open rootd?

1096/tcp open cnrprotocol?

1100/tcp open mctp?

1106/tcp open isoipsigport-1?

1110/tcp open nfsd-status?

1112/tcp open msql?

1119/tcp open bnetgame?

1121/tcp open rmpp?

1122/tcp open availant-mgr?

1124/tcp open hpvmmcontrol?

1126/tcp open hpvmmdata?

1130/tcp open casp?

1131/tcp open caspssl?

1138/tcp open encrypted_admin?

1151/tcp open unizensus?

1152/tcp open winpoplanmess?

1154/tcp open resacommunity?

1163/tcp open sddp?

1165/tcp open qsm-gui?

1166/tcp open qsm-remote?

1169/tcp open tripwire?

1174/tcp open fnet-remote-ui?

1186/tcp open mysql-cluster?

1187/tcp open
alias
?

1198/tcp open cajo-discovery?

1213/tcp open mpc-lifenet?

1216/tcp open etebac5?

1218/tcp open aeroflight-ads?

1234/tcp filtered hotline

1244/tcp open isbconference1?

1272/tcp open cspmlockmgr?

1277/tcp open miva-mqs?

1287/tcp open routematch?

1296/tcp open dproxy?

1300/tcp open h323hostcallsc?

1310/tcp open husky?

1311/tcp open rxmon?

1328/tcp open ewall?

1334/tcp open writesrv?

1434/tcp open ms-sql-m?

1443/tcp open ies-lm?

1455/tcp open esl-lm?

1461/tcp open ibm_wrless_lan?

1494/tcp open citrix-ica?

1500/tcp open vlsi-lm?

1503/tcp open imtc-mcs?

1521/tcp open oracle?

1524/tcp open ingreslock?

1556/tcp open veritas_pbx?

1583/tcp open simbaexpress?

1594/tcp open sixtrak?

1600/tcp open issd?

1641/tcp open invision?

1658/tcp open sixnetudr?

1687/tcp open nsjtp-ctrl?

1688/tcp open nsjtp-data?

1700/tcp open mps-raft?

1721/tcp open caicci?

1755/tcp open wms?

1761/tcp open landesk-rc?

1782/tcp open hp-hcip?

1783/tcp open unknown

1812/tcp open radius?

1839/tcp open netopia-vo1?

1862/tcp open mysql-cm-agent?

1863/tcp open msnp?

1864/tcp open paradym-31?

1875/tcp open westell-stats?

1900/tcp open upnp?

1914/tcp open elm-momentum?

1935/tcp open rtmp?

1971/tcp open netop-school?

1984/tcp open bigbrother?

2000/tcp open cisco-sccp?

2001/tcp open dc?

2002/tcp open globe?

2004/tcp open mailbox?

2005/tcp open deslogin?

2006/tcp open invokator?

2007/tcp open dectalk?

2008/tcp open conf?

2009/tcp open news?

2013/tcp open raid-am?

2021/tcp open servexec?

2030/tcp open device2?

2033/tcp open glogger?

2034/tcp open scoremgr?

2040/tcp open lam?

2042/tcp open isis?

2043/tcp open isis-bcast?

2046/tcp open sdfunc?

2047/tcp open dls?

2049/tcp open nfs?

2099/tcp open h2250-annex-g?

2103/tcp open zephyr-clt?

2105/tcp open eklogin?

2106/tcp open ekshell?

2111/tcp open kx?

2119/tcp open gsigatekeeper?

2121/tcp open ccproxy-ftp?

2135/tcp open gris?

2144/tcp open lv-ffx?

2161/tcp open apc-agent?

2170/tcp open eyetv?

2179/tcp open vmrdp?

2190/tcp open tivoconnect?

2191/tcp open tvbus?

2196/tcp open unknown

2366/tcp open qip-login?

2381/tcp open compaq-https?

2382/tcp open ms-olap3?

2383/tcp open ms-olap4?

2393/tcp open ms-olap1?

2394/tcp open ms-olap2?

2399/tcp open fmpro-fdal?

2522/tcp open windb?

2525/tcp open ms-v-worlds?

2557/tcp open nicetec-mgmt?

2601/tcp open zebra?

2604/tcp open ospfd?

2607/tcp open connection?

2608/tcp open wag-service?

2638/tcp open sybase?

2702/tcp open sms-xfer?

2710/tcp open sso-service?

2717/tcp open pn-requester?

2725/tcp open msolap-ptp2?

2800/tcp open acc-raid?

2809/tcp open corbaloc?

|_giop-info: ERROR

2869/tcp open icslap?

2910/tcp open tdaccess?

2920/tcp open roboeda?

2967/tcp open symantec-av?

2968/tcp open enpp?

3003/tcp open cgms?

3005/tcp open deslogin?

3011/tcp open trusted-web?

3013/tcp open gilatskysurfer?

3017/tcp open event_listener?

3030/tcp open arepa-cas?

3052/tcp open powerchute?

3168/tcp open poweronnud?

3211/tcp open avsecuremgmt?

3260/tcp open iscsi?

3268/tcp open globalcatLDAP?

3269/tcp open globalcatLDAPssl?

3283/tcp open netassistant?

3300/tcp open unknown

3306/tcp open mysql MySQL 5.1.55-
log


Что лучше всего выбрать из этого всего? Вбивать в гугл порты по очереди это так долго...

samarobrino
12.09.2012, 01:00
А ты не вбивай все порты, а узнай и запомни самые основные.

disbeliever
12.09.2012, 01:00
Цитата:


А ты не вбивай все порты, а узнай и запомни самые основные.



Я знаю основные..просто интересно может там есть порты которые более уязвимы..

irenica
12.09.2012, 01:00
У тебя есть версии некоторого ПО. Загляни в bugtrack.

1nt
12.09.2012, 01:00
А разве nmap сама пентест проводить не умеет?
+ другое ПО

disbeliever
12.09.2012, 01:00
Цитата:


А разве nmap сама пентест проводить не умеет?



вот..это что мне надо было, спс

kipishnoy
12.09.2012, 01:00
Изучаю тоже самое, пока тормознулся(

disbeliever
13.09.2012, 01:00
Цитата:

Сообщение от kipishnoy

Изучаю тоже самое, пока тормознулся(

а какое ПО используешь?

disbeliever
14.09.2012, 01:00
Цитата:


Именно для портов? Или в целом?



Для пентеста например

kipishnoy
14.09.2012, 01:00
Цитата:

Сообщение от disbeliever

Для пентеста например

Не так прочитал изначально.
w3af GUI пока его осваиваю совместно с метосплойтом, но по каким-то не понятным причинам не запускается(

kipishnoy
14.09.2012, 01:00
Цитата:

Сообщение от disbeliever

а какое ПО используешь?

Именно для портов? Или в целом?