Tuesday, June 16, 2015

Web scanning

Checking if the ports in given range (20-30) is open in target machine.

Use "nc" command in Linux machine

nc -z www.myweb.com 20-30
Connection to www.myweb.com 21 port [tcp/ftp] succeeded!
Connection to www.myweb.com 25 port [tcp/smtp] succeeded!

echo "QUIT" | nc www.myweb.com 20-30
220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
220-You are user number 1 of 50 allowed.
220-Local time is now 11:04. Server port: 21.
220-This is a private system - No anonymous login
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
220 Logout.


Port scanning using nmap

nmap -O www.myweb.com

Starting Nmap 5.21 ( http://nmap.org ) at 2015-06-17 05:18 IST
Nmap scan report for server15.blahblah.in (100.9.000.99)
Host is up (0.059s latency).
Not shown: 986 filtered ports
PORT     STATE  SERVICE
20/tcp   closed ftp-data
21/tcp   open   ftp
22/tcp   closed ssh
25/tcp   open   smtp
53/tcp   open   domain
80/tcp   open   http
110/tcp  closed pop3
143/tcp  closed imap
443/tcp  open   https
465/tcp  open   smtps
587/tcp  open   submission
993/tcp  closed imaps
995/tcp  closed pop3s
8888/tcp open   sun-answerbook
Device type: general purpose|WAP|VoIP phone|switch
Running (JUST GUESSING) : FreeBSD 6.X (89%), BinTec embedded (87%), Polycom embedded (85%), Symbol embedded (85%), Allied Telesyn embedded (85%)
Aggressive OS guesses: FreeBSD 6.2-RELEASE (89%), BinTec R1200 WAP (87%), Polycom SoundPoint 501 IP phone (85%), Symbol WS5000 wireless switch (85%), Allied Telesyn Rapier G6 switch (85%)
No exact OS matches for host (test conditions non-ideal).

No comments: