Skip to Content.
Sympa Menu

baslinux - Re: [BL] nmap and security

baslinux AT lists.ibiblio.org

Subject: Baslinux mailing list

List archive

Chronological Thread  
  • From: "Samual Acorn" <sam.acorn AT gmail.com>
  • To: baslinux AT lists.ibiblio.org
  • Subject: Re: [BL] nmap and security
  • Date: Sun, 28 Jan 2007 07:03:56 -0600

On 27/01/07, sindi keesan <keesan AT sdf.lonestar.org> wrote:
I found 101 pages of man for nmap. The TAG people (who had various
theories about lpr and root, and also suggested a printing script
instead) keep telling me running as root is insecure and to check my
ports. nmap works in BL2 (nmapfe wants libc5 X). It listed a lot of
open ports at sdf.lonestar.org. 21 23 79 80 etc. telnet ftp http?

er... cos i dont want you getting in trouble.. -please- ask before
scanning a system that doesnt belong to you... portscans are rather
frowned upon... most admins will see one and think an attack is not
too far behind... think of it as surveying the battlefeild before
starting the fight...


nmap -v -A 127.0.0.1 said all 1663 ports are closed.

with no services (ftpd, httpd, telnetd, etc) running thats normal....
but as you found out X opens a port (6000) to the outside world when
running...


How should I use nmap to check if my computer is vulnerable while online?
If I don't run telnetd sshd etc is there any security risk?

you would need to probe it from another system over the net to see how
it acts... a good online portscanner is at www.grc.com ... click
'sheilds up' on the first page then click it again on the second...
(bad site design)... youll need to use opera for that site (lynx/links
wont work)

to check for security holes in the browser itself goto
http://bcheck.scanit.be/ ... youll need javascript turned on...



keesan AT sdf.lonestar.org
SDF Public Access UNIX System - http://sdf.lonestar.org



--
--
--sam
--
Web; http://mephitus.no-ip.org/
Skype; Mephitus
ICQ; 51687964
--
"When you've done something right, no one will be sure you've done
anything at all." -- Futurama
--




Archive powered by MHonArc 2.6.24.

Top of Page