enumeration port testing presentation

7/23/2019 Enumeration Port Testing Presentation

http://slidepdf.com/reader/full/enumeration-port-testing-presentation 1/38



EA]PJM[D]EJA



Kaunkrbteja

Kaunkrbteja es tfk gerst bttbdl ja tbrcktaktwjrl< Kaunkrbteja es b prjdkss tjcbtfkr tfk eagjrnbteja b`jut uskr abnks(

nbdfeak abnks( aktwjrl rksjurdks(sfbrks bam skrvedks < Kaunkrbteja nblksb gexkm bdtevk djaakdteja tj b systkn



Bhtfjucf Gehk ]rbasgkr Yrjtjdjh &G]Y% es `kdjneachkss djnnja ja tfk Eatkrakt( djaakdteac tj bam

kxbneaeac tfk djatkat jg G]Y rkpjsetjreks rknbeasjak jg tfk senphkst bam pjtkatebhhy hudrbtevkkaunkrbteja tkdfaequks! Sk―vk skka nbay pu`hedwk` skrvkrs tfbt uskm G]Y gjr uphjbmeac wk`

djatkat( prjvemeac ba kbsy vkdtjr gjr uphjbmeacnbhedejus kxkdutb`hks! ]ypedbhhy( tfk bvbehb`ehety jg kbsehy bddksse`hk gehk.sfbreac skrvedks quedlhy`kdjnks wemksprkbm lajwhkmck( bam pu`hed G]Y

setks kam up fjsteac skasetevk bam pjtkatebhhykn`brrbsseac djatkat! Kvka wjrsk( nbay sudfsetks brk djagecurkm gjr bajaynjus bddkss



]kdfaequks usk gjr Kaunkrbteja

DNM Djnnbam ? ]fkrk brk nbay dnm djnnbams wfedf brk njrkKGGKD]EWK ea hjdbh brkb djaakdtejas tfba weamjws JT ?%

akt usk ? &Sjrls jahy ea xp bam 0999%syatbx ? akt usk XX8ep bmmrkss1XEYD- *u?Kxbnphk ? akt usk XX250!276!0!0XEYT- *u?Mkga ? Et djaakdts tj ets femmka eaakr prjdkss

djnnuaedbteja &EYT-% jg 250!276!0!0 wetf `uehm eabajaynjus uskr &u?% wetf b auhh pbsswjrm &%



a`tstbt ? &tkstkm bam wjrlkm %Tyatbx ? a`tstbt .B8ep bmmrkss1Kxbnphk ? a`tstbt .B8250!276!0!=1[sk ? Sehh ckt tfk Akt@EJT eagjrnbtejabam NBD bmmrkss jg tfk systkn

G]Y Kaunkrbtejasyatbx ? gtp 8gtp skrvkrabnk1Kxbnphk ? gtp gtp!cauphjt!eagj

]kdfaequks &Djateauk %



tkhaktTybatbx ? tkhakt 8[PH*EY1 8pjrt aun`kr1Kxbnphk ? tkhakt www!dsedk!kmu!ea 69 &fttp pjrtaun`kr%[sk ? djaakdt tj b skrvkrYJP] A[N@KP fttp 69gtp 02tkhakt 04

sntp 0;mas ;4tgtp 75geackr 35

Akt@ejs 243

]kdfaequks &Djateauk %



]jjhs usk gjr Kaunkrbteja

Tupkr Tdba

EY ]jjhs . Et cbvk eagjrnbteja b`jut

hjdbh eagj. kxbneaks tfk hjdbh fjst bam sfjws eagj b`jut prjdkssjr(nknjry( Seasjdl mbtb( ktd

Djaakdteja Njaetjr. mesphbys eagjrnbteja b`jut durrkat ]DY bam[MY aktwjrl djaakdtejasAkt@EJT Eagj. ckts Akt@EJT eagjrnbteja b`jut aktwjrl eatkrgbdks&hjdbh bam rknjtk djnputkrs%A@ Tdbaakr. sfbrkm rksjurdks sdbaakr

TANY Tdbaakr. sdbas aktwjrl&s% gjr TANY kab`hkm mkvedksAbnk Tdbaakr. sdbas bhh fjstabnks wetfea b rback jg EY bmmrkssksYjrt Tdbaakr. sdbas aktwjrl&s% gjr bdtevk ]DY `bskm skrvedks[MY Tdbaakr. sdbas aktwjrl&s% gjr bdtevk [MY `bskm skrvedks

http://www.ks-soft.net/ip-tools.eng/mframe.htm

http://www.ks-soft.net/ip-tools.eng/mframe.htm



Yeac Tdbaakr. peacs b rknjtk fjsts jvkr tfk aktwjrl

]rbdk. trbdks tfk rjutk tj b rknjtk fjst jvkr tfk aktwjrl SfjEs. j`tbeas eagjrnbteja b`jut b Eatkrakt fjst jr mjnbeaabnk grjn tfk AED &Aktwjrl Eagjrnbteja Dkatkr%

Geackr. rktrekvks eagjrnbteja b`jut uskr grjn b rknjtk fjstHjjl[p. hjjls gjr mjnbea abnks bddjrmeac tj ets EY bmmrkss jrba EY bmmrkss grjn ets mjnbea abnkCkt]enk. ckts tenk grjn tenk skrvkrs &bhsj et dba skt djrrkdttenk ja hjdbh systkn%]khakt. tkhakt dhekat

F]]Y. F]]Y dhekatEY.Njaetjr. sfjws aktwjrl trbgged ea rkbh tenk &bs b skt jg dfbrts%Fjst Njaetjr. njaetjrs up*mjwa stbtus jg skhkdtkm fjsts!]rbp Sbtdfkr. bhhjws yju tj rkdkevk bam prjdkss TANY ]rbp

nkssbcks!

EY ]jjhs &Djateauk%



sjgtpkrgkdt aktwjrl sdbaakr tjjh

Gkbturks??1Yeacs djnputkrs bam mesphbys tfjsk bhevk!1Mktkdts fbrmwbrk NBD.bmmrkssks( kvka bdrjss rjutkrs!1Mktkdts femmka sfbrkm gjhmkrs bam wretb`hk jaks!1Mktkdts yjur eatkrabh bam kxtkrabh EY bmmrkssks!1Tdbas gjr hestkaeac ]DY pjrts( sjnk [MY bam TANY skrvedks!1Pktrekvks durrkathy hjcckm.ja uskrs( djagecurkm uskr bddjuats(uptenk( ktd!1Uju dba njuat bam kxphjrk aktwjrl rksjurdks!1Dba hbuadf kxtkrabh tferm pbrty bpphedbtejas!1Kxpjrts rksuhts tj F]NH( VNH( DTW bam ]V]

1Tuppjrts Sblk.Ja.HBA( rknjtk sfutmjwa bam skameac aktwjrl nkssbcks!1Pktrekvks pjtkatebhhy bay eagjrnbteja veb SNE!1Pktrekvks eagjrnbteja grjn rknjtk rkcestry( gehk systkn bam skrvedknbabckr!



Kaunkrbteja Yjrts



G]Y Kaunkrbteja( ]DY 02 G]Y pjrt 02 jpka Geackrpreat skrvkr

tkhakt epZbmmrkss 02 &@baakr crb`%

Pua djnnbam gtp epZbmmrkss

gtpIkxbnphk!djn

Dfkdl gjr bajaynjus bddkss

gtp epZbmmrkss[skrabnk? bajaynjus JP bajaYbsswjrm?

bayIknbeh!djn Ybsswjrm cuksseac

Fymrb `rutk gjrdk

nkmusb

@rutus

Kxbneak djagecurbteja gehks

gtpuskrs ( gtp!djag ( prjgtpm!djag

Ne]N

pbsvbcc!ph

http://freeworld.thc.org/

http://www.foofus.net/jmk/medusa/

http://www.hoobie.net/brutus/

ftp://ftp.conf/

http://packetstormsecurity.org/0007-exploits/pasvagg.pl

http://packetstormsecurity.org/0007-exploits/pasvagg.pl

ftp://ftp.conf/

http://www.hoobie.net/brutus/

http://www.foofus.net/jmk/medusa/




TN]Y ]DY 0; — vkrseja jg pjpuhbr TN]Y skrvkrsjgtwbrk

skamnbeh crkbtkr tfba 6 jggkr syatbx tfbt dba `k

kn`kmkm ea tfk nbeh!dg gehk tj mesb`hk jr bdquerk

butfkatedbteja gjr WPGU bam KVYA djnnbams

• Fbs twj djnbams WPGU bam KVYA wfedfrkvkbhs tfk

bdtubh mkhevkry bmmrkssks jg bhebsks bam nbeheachest

• Kc tkhakt 29!025!299!2 0;

Kaunkrbteac TN]Y( ]DY 0;



Tkamnbeh Yjrt 0; jpka Geackrpreat skrvkrtkhakt epZbmmrkss 0; &`baakr crb`%

Nbeh Tkrvkr ]ksteacKaunkrbtk uskrs

WPGU uskrabnk &vkregeks eg uskrabnk kxests . kaunkrbteja jg bddjuats%

KVYA uskrabnk &vkregeks eg uskrabnk es vbhem . kaunkrbteja jg bddjuats%Nbeh Tpjjg ]kstFKHJ baytfeac NBEH GPJN? spjjgkmZbmmrkss PDY] ]J?vbhemZnbehZbddjuat MB]B !R[E]

Nbeh Pkhby ]kstFKHJ baytfeac

Emkatedbh tj*grjn . nbeh grjn? 8aj`jmyImjnbea1 rdpt tj? 8aj`jmyImjnbea1

[alajwa mjnbea . nbeh grjn? 8uskrIualajwaZmjnbea1Mjnbea ajt prkskat . nbeh grjn? 8uskrIhjdbhfjst1Mjnbea ajt supphekm . nbeh grjn? 8uskr1Tjurdk bmmrkss jnesseja . nbeh grjn? 81 rdpt tj? 8aj`jmyIrkdepekatZmjnbea1[sk EY bmmrkss jg tbrckt skrvkr . nbeh grjn? 8uskrIEYZBmmrkss1 rdpt tj?8aj`jmyIrkdepekatZmjnbea1[sk mju`hk qujtks . nbeh grjn? 8uskrImjnbea1 rdpt tj? 8uskrIrkdepkat.mjnbea1[skr EY bmmrkss jg tfk tbrckt skrvkr . nbeh grjn? 8uskrImjnbea1 rdpt tj?8aj`jmyIrkdepekatZmjnbeaI\EY Bmmrkss^1Mespbrbtk gjrnbtteac . nbeh grjn? 8uskrI\EY Bmmrkss^1 rdpt tj?8Imjnbea?aj`jmyIrkdepekat.mjnbea1Mespbrbtk gjrnbtteac0 . nbeh grjn? 8uskrI\EY Bmmrkss^1 rdpt tj?

8rkdepekatZmjnbea"aj`jmyI\EY Bmmrkss^1Kxbneak Djagecurbteja Gehks . skamnbeh!dg( su`net!dg



MAT pjrt ;4 jpka Geackrpreat skrvkr* skrvedk

fjst

fjst \.bDmhar]wv ^ \.d dhbss ^ \.A amjts ^ \.P aun`kr ^ \.t typk ^ \.S wbet ^ abnk \skrvkr ^ .v vkr`jskgjrnbt .t &qukry typk% Bhhjws b uskr tj spkdegy b rkdjrm typk e!k! B( AT( jr Y]P! .b Tbnk bs —t BAU! .h _jak

trbasgkr &eg bhhjwkm%! .g Tbvk tj b spkdegekm gehkabnk!

ashjjlup

ashjjlup \ .jpteja !!! ^ \ fjst.tj.geam | . \ skrvkr ^^

mec

mec \ Iskrvkr ^ \.` bmmrkss ^ \.d dhbss ^ \.g gehkabnk ^ \.l gehkabnk ^ \.p pjrt$ ^ \.t typk ^ \.x bmmr ^ \.yabnk?lky ^ \.= ^ \.7 ^ \abnk ^ \typk ^ \dhbss ^ \qukryjpt!!! ^

wfjes.f [sk tfk abnkm fjst tj rksjhvk tfk qukry .b [sk BPEA tj rksjhvk tfk qukry .r [sk PEYK tj

rksjhvk tfk qukry .p [sk BYAED tj rksjhvk tfk qukry .R Ykrgjrn b quedl hjjlup

MAT Kaunkrbteja

@ehk Tuetk

pkrh @eHK!ph \wk`setk^ \prjokdtZabnk^

pkrh @eHK.wkecf!ph \wk`setk^ \eaput gehk^

pkrh vkt.EYrback!ph \eaput gehk^ \truk mjnbea gehk^ \jutput gehk^ 8rback1

pkrh vkt.nx!ph \eaput gehk^ \truk mjnbea gehk^ \jutput gehk^

pkrh kxp.thm!ph \eaput gehk^ \jutput gehk^

pkrh obrg.mas`rutk \mjnbeaZabnk^ &`rutkhkvkh% \gehkZwetfZabnks^

pkrh qtrbdk!ph \epZbmmrkssZgehk^ \jutputZgehk^

pkrh obrg.rkv \su`akt`hjdl^ \abnkskrvkr^

txmas

txmas .rt .t mjnbeaZabnk

txmas .x ;9 .`` mjnbeaZabnk

txmas ..vkr`jsk .gn wjrmhest!med ..skrvkr epZbmmrkss .rr TJB mjnbeaZabnk .f d? Xfjsthest!txt

Kxbneak Djagecurbteja Gehks . fjst!djag( rksjhv!djag ( abnkm!djag

MAT _jak ]rbasgkr( ]DY ;4

http://www.sensepost.com/

http://www.txdns.net/



http://www.sensepost.com/



]G]Y pjrt 75 jpka ]G]Y Kaunkrbteja

tgtp epZbmmrkss Y[] hjdbhZgehk

tgtp epZbmmrkss CK] djag!txt &jr jtfkr gehks%

Tjhbrweams ]G]Y skrvkr

tgtp — e 8EY1 CK] *ktd*pbsswm &jhm Tjhbres%

]G]Y @rutkgjrdeac

]G]Y `rutkgjrdkr Desdj.]jrdf

]G]Y( ]DY*[MY 75 trevebh gehk trbasgkr prjtjdjh gjr uabutfkatedbtkm gehk

trbasgkrs useac [MY pjrt 75

• Ets trevebh tj djpy b pjjrhy skdurkm *ktd*pbsswm

-tgtp 250!276!090!4=

tgtp1ckt *ktd*pbsswm *tnp*pbsswm!drbdlhbtkr

tgtp1quet

Kaunkrbteac ]G]Y( ]DY*[MY 75

http://www.arhont.com/digitalAssets/

http://www.hackingciscoexposed.com/?link=tools









Geackr Yjrt 35 jpka

[skr kaunkrbteja

geackr #b ` d m k g c f# Ikxbnphk!djn

geackr bmneaIkxbnphk!djn

geackr uskrIkxbnphk!djn

geackr 9Ikxbnphk!djn

geackr !Ikxbnphk!djngeackr //Ikxbnphk!djn

geackr tkstIkxbnphk!djn

geackr Ikxbnphk!djn

Djnnbam kxkduteja

geackr |*`ea*emIkxbnphk!djngeackr |*`ea*hs .b *Ikxbnphk!djn

Geackr @juadk

geackr uskrIfjstIvedten

geackr IeatkrabhIkxtkrab

Geackr( ]DY*[MY 35



Sk` Yjrts 69( 6969 ktd! jpka Geackrpreat skrvkr

]khakt epZbmmrkss pjrt

Gerkgjx phuceas Bhh

gerkdbt

Tpkdeged

bmm a kmet djjleks

bsaun`kr

fkbmkr spy

hevk fttp fkbmkrs sfbzju

wk` mkvkhjpkr

Drbwh wk`setk

hyax \jptejas^ stbrtgehk*[PH Jptejas eadhumk .trbvkrsbh .drbwh .munp .enbckZheals .sjurdk

fttpreat Nktbcjjgeh

nktbcjjgeh!py .m \mjnbea^ .h \aj! jg^ .g \typk^ .j rksuhts!ftnh

Sk` Merkdtjry kaunkrbteja

Aeltj

aeltj \.f tbrckt^ \jptejas^ ( Mer@ustkr( Seltj( Cjjhbc Tdbaakr

Kaunkrbteac F]]Y( ]DY 69

http://www.security-database.com/

https://addons.mozilla.org/





http://chrispederick.com/work/web-developer/

http://net-square.com/httprint/httprint_paper.html

http://www.edge-security.com/metagoofil.php

http://www.cirt.net/code/nikto.shtml

http://www.owasp.org/index.php/Category:OWASP_DirBuster_Project

http://www.sensepost.com/research/wikto/

http://www.goolag.org/download.html














http://chrispederick.com/work/web-developer/












Kaunkrbteja Nedrjsjgt PYD Yjrt 24;

Kaun

kaun 8.[NATYCHmd1 8.u uskrabnk1 8.p pbsswjrm1 8.g medtgehk1 8fjstabnk|ep1 Auhh Tksseja

akt usk XX250!276!2!2Xepd- *u?

akt vekw XXepZbmmrkss

Munpskd

Tn`dhekat

sn`dhekat .H **skrvkr*sfbrk pbsswjrm jptejas

Tupkrsdba

Kaunkrbteja tb`!

uskr0sem*sem0uskr

Seagj

Akt@EJT `rutk gjrdk

Fymrb( @rutus( Dbea ' B`kh( cktbddt AB] &Akt@EJT Bumeteac ]jjh%

Kxbneak Djagecurbteja Gehks

Tn`!djag

hnfjsts

Kaunkrbteac Nedrjsjgt PYD Kampjeat Nbppkr&NTPYD% ]DY24;

http://www.bindview.com/Services/RAZOR/Utilities/Windows/enum_readme.cfm

http://www.systemtools.com/download/dumpacl.zip

http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/proddesc/superscan.htm

http://packetstormsecurity.org/NT/hack/sid.zip

http://ntsecurity.nu/toolbox/winfo/

http://www.cotse.com/tools/netbios.htm













Kaunkrbteja Akt@EJT Jpka Yjrts [MY 243

Kaun




Munpskd

Tn`dhekat


Tupkrsdba

Kaunkrbteja tb`!

uskr0sem*sem0uskr

Seagj

Akt@EJT `rutk gjrdk



Tn`!djag

hnfjsts

Akt@EJT Abnk Tkrvedk Kaunkrbteja( [MY 243



















Akt@EJT Tksseja Kaunkrbteja( ]DY 245

Akt@EJT Yjrts 245

Kaun




Munpskd

Tn`dhekat


Tupkrsdba

Kaunkrbteja tb`!

uskr0sem*sem0uskr

Seagj

Akt@EJT `rutk gjrdk



Tn`!djag

hnfjsts



















TANY pjrt 272 jpka Mkgbuht Djnnuaety Ttreacspu`hedprevbtk

desdjdb`hk.mjdsesEHNE

NE@ kaunkrbtejaSeamjws A]

!2!4!7!2!0!2!2!; Fjstabnks ( !2!4!7!2!=!2!33!2!=!0 Mjnbea Abnk ( !2!4!7!2!=!2!33!2!0!0;[skrabnks ( !2!4!7!2!=!2!33!2!0!4!2!2 Puaaeac Tkrvedks ( !2!4!7!2!=!2!33!2!0!03 Tfbrk Eagjrnbteja

Tjhbrweams NE@ wbhl Ckteg sanpwbhl

sanpwbhl .v 8Wkrseja1 .d 8Djnnuaety streac1 8EY1Tasdba Bpphedbtejas

_yVkhsanpckt .v0d .d 8Djnnuaety Ttreac1 8EY1 2!4!7!2!=!2!659!2!0!2!0!7!9

sanpwbhl .v0d .d 8Djnnuaety Ttreac1 8EY1 2!4!7!2!=!2!659!2!0!2!0TANY @rutkgjrdk

jaksextyjakjaksexytjak .d TANY!wjrmhest 8EY1

dbt!*dbt .f 8EY1 .w TANY!wjrmhest

Tjhbrweams TANY @rutk Gjrdk BMNsanp

Kxbneak TANY Djagecurbteja gehks . sanp!djag( sanpm!djag ( sanp.djagec!xnh

TANY Kaunkrbteja( [MY 272

http://www.solarwinds.net/Download-Tools.htm

http://www.wtcs.org/snmp4tpc/getif.htm

http://www.foundstone.com/


http://adm.freelsd.net/ADM/

http://adm.freelsd.net/ADM/


http://www.foundstone.com/

http://www.wtcs.org/snmp4tpc/getif.htm




@CY Kaunkrbteja( ]DY 235

]fk @jrmkr Cbtkwby Yrjtjdjh &@CY% es tfk mk gbdtj rjuteac prjtjdjh

ja tfk Eatkrakt bam es uskm `y rjutkrs tj prjpbcbtk eagjrnbtejaakdkssbry tj rjutk EY pbdlkts tj tfker mksteabtejas! @y hjjleac bt tfk@CY rjuteac tb`hks( yju dba mktkrneak tfk aktwjrls bssjdebtkm wetfb pbrteduhbr djrpjrbteja tj bmm tj yjur tbrckt fjst nbtrex! Bhhaktwjrls djaakdtkm tj tfk Eatkrakt mj ajt ‛spkbl‗ @CY( bam tfesnktfjm nby ajt wjrl wetf yjur djrpjrbtk aktwjrl! Jahy aktwjrlstfbt fbvk njrk tfba jak upheal usk @CY( bam tfksk brk typedbhhyuskm `y nkmeun.tj.hbrck jrcbaezbtejas!

]fk nktfjmjhjcy es senphk! Fkrk brk tfk stkps tj pkrgjrn @CYrjutk kaunkrbteja?

2! Mktkrneak tfk Butjajnjus Tystkn Aun`kr &BTA% jg tfk tbrcktjrcbaezbteja!

0! Kxkdutk b qukry ja tfk rjutkrs tj emkategy bhh aktwjrls wfkrk tfk BTYbtf tkrneabtks wetf tfk jrcbaezbteja―s BTA!



]fk @CY prjtjdjh usks EY aktwjrl bmmrkssks bam BTAskxdhusevkhy! ]fk BTA es b 27.`et eatkckr tfbt bajrcbaezbteja purdfbsks grjn BPEA tj emkategy etskhg ja

tfk aktwjrl! Uju dba tfeal jg ba BTA bs ba EY bmmrkssgjr ba jrcbaezbteja! @kdbusk yju dbaajt kxkdutkdjnnbams ja b rjutkr useac b djnpbay abnk( tfk gerststkp es tj mktkrneak tfk BTA gjr ba jrcbaezbteja! ]fkrkbrk twj tkdfaequks tj mj tfes( mkpkameac ja wfbt typkjg eagjrnbteja yju fbvk! Jak bpprjbdf( eg yju fbvk tfkdjnpbay abnk( es tj pkrgjrn b wfjes skbrdf wetf tfk

BTA lkywjrm

Bhtkrabtevkhy( eg yju fbvk ba EY bmmrkss gjr tfk

jrcbaezbteja( yju dba qukry b rjutkr bam usk tfk hbstkatry ea tfk BT Ybtf bs tfk BTA! Gjr kxbnphk( yju dbatkhakt tj b pu`hed rjutkr bam pkrgjrn tfk gjhhjweacdjnnbams?



D?1tkhakt rjutk.vekws!jrkcja.ex!akt

[skr Bddkss Wkregedbteja

[skrabnk? rvekws

rjutk.vekws!jrkcja.ex!akt1sfjw ep `cp74!35!2;6!2

@CY rjuteac tb`hk katry gjr 74!35!2;6!9*0=( vkrseja

302;763

Ybtfs? &05 bvbehb`hk( `kst $2=%

Ajt bmvkrteskm tj bay pkkr

6526 392 2745= 2745=020!=!254!0;4 grjn 020!=!254!0;4 &020!=!254!0;4%

Jrecea ECY( hjdbhprkg 299( vbhem( kxtkrabh



HMBY Yjrt 465 Jpka hmbp kaunkrbteja

hmbpneakr

hmbpneakr .f epZbmmrkss .p pjrt &ajt rkquerkm eg mkgbuht% .m

hunb Cue `bskm tjjh

hmp

Cue `bskm tjjh

jpkahmbp

hmbpskbrdf \.a^ \.u^ \.v^ \.l^ \.L^ \.t^ \.B^ \.H\H\H^^^ \.N\N^^ \.m mkùchkvkh^ \.g gehk^ \.M

èamma^ \.S^ \.w pbsswm^ \.y pbsswmgehk^ \.F hmbpure^ \.f hmbpfjst^ \.p hmbppjrt^ \.Y 0|4^ \.` skbrdf`bsk^ \.s `bsk|jak|su`^ \.b akvkr|bhwbys|skbrdf|geam^ \.h tenkhenet^ \.z sezkhenet^ \.J skdurety.prjpkrteks^ \.E^ \.[ butfdem^ \.P rkbhn^ \.x^ \.V butfzem^ \.U nkdf^ \._\_^^ gehtkr\bttrs!!!^

hmbpbmm \.d^\.T gehk^\.a^\.v^\.l^\.L^\.N\N^^\.m mkùchkvkh^\.M èamma^\.S^\.w pbsswm^\.ypbsswmgehk^\.f hmbpfjst^\.p hmbp.pjrt^\.Y 0|4^\.J skdurety.prjpkrteks^\.E^\.R^\.[ butfdem^\.P rkbhn^\.x^\.V butfzem^\.U nkdf^\._\_^^\.g gehk^

hmbpmkhktk \.a^\.v^\.l^\.L^\.d^\.N\N^^\.m mkùchkvkh^\.g gehk^\.M èamma^\.S^\.w pbsswm^\.ypbsswmgehk^\.F hmbpure^\.f hmbpfjst^\.Y 0|4^\.p hmbppjrt^\.J skdurety.prjpkrteks^\.[butfdem^\.P rkbhn^\.x^\.E^\.R^ \.V butfzem^\.U nkdf^\._\_^^\ma^

hmbpnjmegy \.b^\.d^\.T gehk^\.a^\.v^\.l^\.L^\.N\N^^\.m mkùchkvkh^\.M èamma^\.S^\.wpbsswm^\.y pbsswmgehk^\.F hmbpure^\.f hmbpfjst^\.p hmbppjrt^\.Y 0|4^\.J skdurety.prjpkrteks^\.E^\.R^\.[ butfdem^\.P rkbhn^\.x^\.V butfzem^\.U nkdf^\._\_^^\.g gehk^

hmbpnjmrma \.r^\.a^\.v^\.l^\.L^\.d^\.N\N^^\.m mkùchkvkh^\.M ̀ eamma^\.S^\.w pbsswm^\.ypbsswmgehk^ \.F hmbpure^\.f hmbpfjst^\.p hmbppjrt^\.Y 0|4^\.J skdurety.prjpkrteks^\.E^\.R^\.[

butfdem^\.P rkbhn^\.x^ \.V butfzem^\.U nkdf^\._\_^^\.g gehk^\ma rma^

Seamjw Bdtevk Merkdtjr HMBY Kaunkrbteja( ]DY*[MY 465 ' 4076

http://sourceforge.net/projects/ldapminer/

http://luma.sourceforge.net/

http://www.microsoft.com/

http://www.vulnerabilityassessment.co.uk/%20http://www.openldap.org/









http://examples.oreilly.com/networksa/tools/




hmbp `rutk gjrdk `gZhmbp

`gZhmbp .s skrvkr .m mjnbea abnk .u|.[ uskrabnk | uskrs hest gehk abnk .H|.h pbsswjrms hest |hkactf jg pbsswjrms tj ckakrbtk jptejabh? .p pjrt &mkgbuht 465% .v &vkr`jsk njmk% .Y Hmbpuskr pbtf &mkgbuht (DA>[skrs(%

L9hmT

HMBYZ@rutk!ph Kxbneak Djagecurbteja Gehks Ckakrbh

djatbeakrs!hmeg

hmbp!dgc

hmbp!djag

hmbp!xnh

hmbp.djagec!xnh hmbp.rkbhn!xnh

shbpm!djag

E@N TkdurkSby W4 skrvkr

W4!sbs!jd

Nedrjsjgt Bdtevk Merkdtjry skrvkr

nsbmDhbssksBttrs!hmeg

Aktsdbpk Merkdtjry Tkrvkr = asshbpm!sbsZbt!djag

asshbpm!sbsZjd!djag

JpkaHMBY merkdtjry skrvkr

shbpm!sbsZbt!djag

shbpm!sbsZjd!djag

Tua JAK Merkdtjry Tkrvkr ;!2

3;sbs!hmeg


http://www.indianz.ch/

http://www.securiteam.com/tools/6F00D0U3GK.html

http://www.securiteam.com/tools/6F00D0U3GK.html

http://www.indianz.ch/





Ajvkhh AktSbrk Kaunkrbteja( ]DY ;0= bam EYV

Nedrjsjgt Seamjws es ajt bhjak wetf ets ‛auhh sksseja‗

fjhks! Ajvkhh―s AktSbrk fbs b senehbr prj`hkn”bdtubhhyet―s wjrsk! Ajvkhh prbdtedbhhy cevks up tfk eagjrnbtejagbrn( bhh wetfjut butfkatedbteac tj b seachk skrvkr jrtrkk! Jhm AktSbrk 4!x bam =!x skrvkrs &wetf @eamkry

Djatkxt kab`hkm% fbvk wfbt dba `k dbhhkm tfk ‛Bttbdf‗ vuhakrb`ehety( bhhjweac bayjak tj mesdjvkr skrvkrs( trkks(crjups( preatkrs( bam uskrabnks wetfjut hjcceac eatj bseachk skrvkr!

Tkk tfk rkgkrkadk gjr fjw kbsehy tfes es mjak bamrkdjnnkambtejas gjr phucceac up tfksk eagjrnbtejafjhks!



AktSbrk Kaunkrbteja veb Aktwjrl Akecf`jrfjjm

]fk gerst stkp tj kaunkrbteac b Ajvkhh aktwjrl es tj hkbra

b`jut tfk skrvkrs bam trkks bvbehb`hk ja tfk werk! ]fesdba `k mjak b aun`kr jg wbys( `ut ajak njrk senphytfba tfrjucf tfk Seamjws Aktwjrl Akecf`jrfjjm! ]fesfbamy aktwjrl.`rjwseac utehety wehh qukry gjr bhh Ajvkhh

skrvkrs bam AMT trkks ja tfk werk! ]fes kaunkrbtejajddurs jvkr EYV ja trbmetejabh AktSbrk aktwjrls( jr vebAktSbrk Djrk Yrjtjdjh &ADY( ]DY ;0=% gjr AktSbrk ; jrcrkbtkr skrvkrs ruaaeac ‛purk‗ ]DY*EY &tfk AktSbrk dhekatsjgtwbrk ksskatebhhy wrbps EYV ea ba EY pbdlkt wetfmksteabteja pjrt ]DY ;0=%! Bhtfjucf yju dbaajt mrehh mjwaeatj tfk Ajvkhh AMT trkk wetfjut hjcceac eatj tfk trkketskhg( tfes dbpb`ehety rkprkskats tfk eaetebh `b`y stkpshkbmeac tj njrk skrejus bttbdls!



[AEV PYD Kaunkrbteja( ]DY*[MY 222 bam 40332

Helk bay aktwjrl rksjurdk( bpphedbtejas akkm tj fbvk b

wby tj tbhl tj kbdf jtfkr jvkr tfk werks! Jak jg tfknjst pjpuhbr prjtjdjhs gjr mjeac oust tfbt es PknjtkYrjdkmurk Dbhh &PYD%! PYD knphjys b skrvedk dbhhkm tfkpjrtnbppkr &ajw lajwa bs rpdèam% tj brètrbtk`ktwkka dhekat rkquksts bam pjrts tfbt et myabnedbhhy

bssecas tj hestkaeac bpphedbtejas! Mkspetk tfk pbea et fbsfestjredbhhy dbuskm gerkwbhh bmneaestrbtjrs( PYD rknbeaskxtrknkhy pjpuhbr! ]fk rpdeagj tjjh es tfk kquevbhkat jg geackr gjr kaunkrbteac PYD bpphedbtejas hestkaeac ja

rknjtk fjsts bam dba `k tbrcktkm bt skrvkrs gjuamhestkaeac ja pjrt 222 &rpdèam% jr 40332 &Tua―s bhtkrabtkjrtnbppkr% ea prkvejus sdbas?



\rjjt-^rpdeagj —p 250!276!090!4=

prjcrbn vkrs prjtj pjrt

299999 0 tmp 222 ruskrsm299990 4 ump 320 ruskrsm

299922 0 ump 3;= rqujtbm

29999; 2 ump 74; njuatm

299994 0 ump 09=5 ags

29999= 0 tdp 336 ypskrv

]fes tkhhs bttbdlkrs tfbt tfes fjst es ruaaeac ruskrsm( AGT(

bam AET &ypskrv es tfk AET skrvkr%! ]fkrkgjrk( ruskrs(sfjwnjuat .k( bam psdba —a wehh prjmudk gurtfkreagjrnbteja &skk rkgkrkadk gjr njrk tjjhs bam mesdusseja%!]fk psdba tjjh dba bhsj `k uskm tj kaunkrbtk tfes eagj `y

usk jg tfk .r swetdf!



TRH Tkrvkr Yjrt 2=44 2=4= jpka TRH Kaunkrbteja

peccy

TRHYeac sqhpeac epZbmmrkss*fjstabnk

TRHYeac0

TRHYeac4

TRHpjlk

TRH Pkdja

TRHvkr

TRH @rutk Gjrdk

TRHYB]

sqh`g .u fbsfks!txt .m medtejabry!med .r jut!rkp . Medtejabry Bttbdl

sqh`g .u fbsfks!txt .d mkgbuht!dn .r jut!rkp . @rutk.Gjrdk Bttbdl

TRH Medt

TRHB]

Fymrb

TRHhfg

GjrdkTRH

TRH Pksjhuteja Tkrvedk Kaunkrbteja( [MY 2=4=

http://www.cqure.net/wp/?page_id=33

http://www.sqlsecurity.com/Tools/FreeTools/tabid/65/Default.aspx




http://www.specialopssecurity.com/labs/sqlrecon/1.0/down.php



http://ntsecurity.nu/toolbox/sqldict/




http://www.securityfocus.com/tools/3021













http://www.specialopssecurity.com/labs/sqlrecon/1.0/down.php










AGT Yjrt 09=5 jpka AGT Kaunkrbteja

sfjwnjuat .k fjstabnk*epZbmmrkss

njuat .t agsepZbmmrkss?*merkdtjryZgjuamZkxpjrtkm

*hjdbhZnjuatZpjeat AGT @rutk Gjrdk

Eatkrbdt wetf AGT sfbrk bam try tj bmm*mkhktk

Kxphjet bam Djagusk [aex Kxbneak Djagecurbteja Gehks

*ktd*kxpjrts

*ktd*he`*ags*xtb`

AGT Kaunkrbteja( ]DY*[MY 09=5

http://www.vulnerabilityassessment.co.uk/nfs.htm

http://www.vulnerabilityassessment.co.uk/nfs.htm



=!9 PKGKPKADKT

Fbrry Akwtja( ‘Akwtja―s ]khkdjn Medtejabry(„

DNY @jjls( Akw Ujrl( AU( 0990!

fttp?**www!pfkajkhet.us!jrc*mph*mph!ftnh

Yjstkh( Ojfa! PGD 354! Pktrekvkm 05 Ouak 0920!

Yjrt Aun`krs! Eatkrakt Bssecakm Aun`krs Butfjrety &EBAB%!

fttp?**ka!welepkmeb!jrc*wele*HestZjgZ]DYZbamZ[MYZpjrtZaun`krs

http://www.phenoelit-us.org/dpl/dpl.html

http://www.ietf.org/rfc/rfc793.txt

http://www.iana.org/assignments/port-numbers

http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers





http://www.iana.org/assignments/port-numbers

http://www.ietf.org/rfc/rfc793.txt






Ekkk xphjrk mecetbh he`rbry( Dbvkamesf( M! D'D Pks!

Djnnuaedbtejas Nbcbzeak( Hb`s!( [TB Wjhunk? 46(

Essuk? 7( Ybcks? 27= — 230fttp?**ekkkxphjrk!ekkk!jrc*xph*hjcea!osp:tp>'braun`kr

>6=7959'urh>fttp+4B+0G+0Gekkkxphjrk!ekkk!jrc+

0Gekh;+0G4;+0G264;4+0G996=7959!pmg+4Gbraun

`kr+4M6=7959 Cecb`et Ktfkrakt gjr Nktrj Brkb Aktwjrls( Ybuh

@kmkhh! 0994! Ybck 405!

Mbhk @brr( OP!( Yktkr N! Gjabsf? Eatkrakt Yrjtjdjh

jvkr Jptedbh ]rbaspjrt Aktwjrls< Abtejabh

Djnnuaedbteja ]kdfajhjceks( Ead! Mkd 0994! Ybck 5(

=4 tj =3!

http://ieeexplore.ieee.org/xpl/login.jsp?tp=&arnumber=846090&url=http%3A%2F%2Fieeexplore.ieee.org%2Fiel5%2F35%2F18353%2F00846090.pdf%3Farnumber%3D846090










C!3320( ‘Wkrtkh Tuppjrts( Hbtkst Jptedbh Aktwjrl

Nbabcknkat Ttbambrm„(

Kn`kmmkm Ttbrs( hbst bddksskm 04 Tkptkn`kr 0997! fttp?**www!kn`kmmkmstbr!djn*prkss*djatkat*0994*4*k

n`kmmkm3657!ftnh(

KDE Hecftsjgt Aktwjrl Nbabcknkat Tjhutejas

Ckakrbh Mksdrepteja

Fbam`jjl( 0am Kmeteja( KDE( Ouak 0997! Ybck 7=!

Nbleac Ktfkrakt jvkr TJAK]( M! Grky( G! Njjrk( ‘B ]rbaspjrt Aktwjrl Jpkrbtejas Njmkh„(Yrjdkkmeacs AGJKD( 0994! Ybck 05!



[skguh EA]KPAK] BMMPKTTKT JG T]BAMBPMT

@JMEKT BAM GJP[NT

Eatkrak? fttp?**www!pfkajkhet.us!jrc*mph*mph!ftnh

]khkdjnnuaedbtejas Eamustry Bssjdebteja &]EB%?

www!tebjaheak!jrc

Eatkrabtejabh Khkdtredbh Khkdtrjaed Kaceakkrs &EKKK%

www!ekkk!jrc



http://www.tiaonline.org/

http://www.ieee.org/

http://www.ieee.org/

http://www.tiaonline.org/






]FBAL UJ[

enumeration port testing presentation

Documents