Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 47 guests and 1 member online
 
Advertisement

You are here: Home arrow Resourcesarrow Career Centralarrow Its all about Ports
EH-Net
May 24, 2013, 02:19:29 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: 1 [2] 3   Go Down
  Print  
Author Topic: Its all about Ports  (Read 19164 times)
0 Members and 1 Guest are viewing this topic.
chrisj
Hero Member
*****
Offline Offline

Posts: 1163


View Profile WWW
« Reply #15 on: July 10, 2011, 02:21:10 AM »

I have that site book marked, and on my links webpage (home page). but I actually like this one more.

http://en.wikipedia.org/wiki/Tcp_port_numbers
Logged

OSWP, Sec+
millwalll
Guest
« Reply #16 on: July 10, 2011, 04:36:19 PM »

I have seen both them sites before and both great resources do you think I could take them into interview with me lol

Or you think my answer for every question should be GOOGLE IS YOUR FRIEND!!
Logged
lorddicranius
Sr. Member
****
Offline Offline

Posts: 447



View Profile WWW
« Reply #17 on: July 10, 2011, 04:48:29 PM »

Also, check out the nmap-services file. They list the "popularity" of each service.

That's a good tip!  I was thinking about this more and remembered watching an old DEFCON talk with Fyodor and him mentioning how they've implemented the ability to scan more frequently used ports rather than either scanning them all or having to specify ports.  I was wondering how they did that, because then you could just check to see which ports are scanned in a scan that just does the top 1000 most frequently used.  I had never actually looked at the nmap-services file before, but I think that the frequency column there is what's actually used to accomplish this..?

Anyway, came up with a quick single-line command that'd show you the most common open ports according to Fyodor's MANY random scans used for statistical analysis:

Code:
sort -r -t " " -k3 /usr/local/share/nmap/nmap-services

The white space in between the double quotes is actually a tab (CTRL+v <TAB>).  This will sort the frequency column putting the most frequently opened ports at the top, least frequently opened ports at the bottom, instead of being ordered by port numbers.
« Last Edit: July 10, 2011, 04:50:00 PM by lorddicranius » Logged

GSEC, eCPPT, Sec+
chrisj
Hero Member
*****
Offline Offline

Posts: 1163


View Profile WWW
« Reply #18 on: July 10, 2011, 09:42:07 PM »

I have seen both them sites before and both great resources do you think I could take them into interview with me lol

Or you think my answer for every question should be GOOGLE IS YOUR FRIEND!!

I've gotten a mixed bag on that one. I've said, what I don't know, I'm good at finding online with Google. I've only had one person ask me, but what if the internet is down? To which I said, I' turn to my physical library that I keep at my desk. Then listed the few books I usually keep at work or in my backpack as reference books.
Logged

OSWP, Sec+
j0rDy
Hero Member
*****
Offline Offline

Posts: 590


View Profile
« Reply #19 on: July 11, 2011, 03:35:47 AM »

I have seen both them sites before and both great resources do you think I could take them into interview with me lol

Or you think my answer for every question should be GOOGLE IS YOUR FRIEND!!

I've gotten a mixed bag on that one. I've said, what I don't know, I'm good at finding online with Google. I've only had one person ask me, but what if the internet is down? To which I said, I' turn to my physical library that I keep at my desk. Then listed the few books I usually keep at work or in my backpack as reference books.

if you are doing a webapp audit, and the internet is down, you have alot more to worry about then looking up ports Grin

The more i think about it its a pretty good interviewing method. it shows how resourceful you are in solving problems and clearly most of the questions are not to be taken literally, and should be read between the lines. interviewing (especially job interviewing) is a whole different subject and mastering it is a skill and takes years of practice, just as hacking...
Logged

ISC2 Associate, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net
hayabusa
Hero Member
*****
Offline Offline

Posts: 1633



View Profile
« Reply #20 on: July 11, 2011, 11:26:28 AM »

When I interview, I ALWAYS want to get a feel for a person's capabilities - not only their memorization and book knowledge, but their common-sense.  I won't always discount someone, based solely on a lack of memorization (although, depending on the questions, if they really blow even the simple ones, their chances of moving forward in the interview are slim.)  I like to hear folks admit when they'll go to another person or resource to get an answer.  In fact, I'd much rather hear them go to that, quickly, than to sit and BS with me, and try to play around the fact that they don't know what I'm asking for, etc.

As we'd said in another thread a while back, the biggest thing is to be open and honest in what you know and don't know, and the same with regard to your experience(s)  While you may not land some dream job, right away, because you don't have something, for that same reason, you might not bury yourself into something that you won't understand, and that will hinder your future prospects and opportunities.  I'd much rather hire / place someone into a junior position, and help them grow, then hire them into a senior position, only to watch them fail miserably, cause harm to my company (or my clients' companies,) and have bad experiences, all around.
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1060


aka dynamik


View Profile WWW
« Reply #21 on: July 12, 2011, 11:53:16 PM »

When I interview, I ALWAYS want to get a feel for a person's capabilities - not only their memorization and book knowledge, but their common-sense.  I won't always discount someone, based solely on a lack of memorization (although, depending on the questions, if they really blow even the simple ones, their chances of moving forward in the interview are slim.)  I like to hear folks admit when they'll go to another person or resource to get an answer.  In fact, I'd much rather hear them go to that, quickly, than to sit and BS with me, and try to play around the fact that they don't know what I'm asking for, etc.

As we'd said in another thread a while back, the biggest thing is to be open and honest in what you know and don't know, and the same with regard to your experience(s)  While you may not land some dream job, right away, because you don't have something, for that same reason, you might not bury yourself into something that you won't understand, and that will hinder your future prospects and opportunities.  I'd much rather hire / place someone into a junior position, and help them grow, then hire them into a senior position, only to watch them fail miserably, cause harm to my company (or my clients' companies,) and have bad experiences, all around.

I enjoy seeing people show their true selves. Our network team was recently looking for an additional person, and I got pulled into one of the interviews because the candidate had security experience, and they wanted me to evaluate that.

Our systems guys are always bitching about the number of VLANs and our network topology. They told him about this and asked him how he would respond. He simply said, "I'd create more VLANs." We all cracked up and he got a job offer shortly afterwards.

Note: He ACED all the other questions, but we work in a high-stress environment, so seeing someone have the guts and sense of humor to take a chance and make a joke during an interview went a long way for us. Stuff like this obviously depends on the environment, but it's another example of how being genuine will ultimately help you land the role you want.
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
millwalll
Guest
« Reply #22 on: July 13, 2011, 06:54:25 AM »

I have had a few interview and I always seem to mess it up. They ask me stuff what I know but for some reason in a interview I just can not pick it out of my head.

I just find it really frustrating as I know I could be a extremely good security consultant. I just need some guidance and some help to get me on the right path. I learn a lot faster by doing something than reading about it this why getting job so important to me as I would learn very fast.

In all my jobs to date I have been there less time than people who have worked there for years. And they come to me for help as I know all the answer. Just because I want be best I can and give 200% to know everything I can and put extra work in to learn new stuff.

I just don't know what to? how I can give a better interview? when the question that are asked are so broad. And half the time they ask me a question on something I have not done yet. I always tell them I have not done this yet but they still seem to want to ask more about it.

I just feel like I am kinder stuck as the only way to progress is to learn more stuff the best way for me to do this is hands on or course but I cant afford the courses so I need a job.

However if no one willing to have the guts to give me a try I feel that I have to give up on working in security and go for a job that I can do but wont enjoy. A big problem as well is my age I  am not getting any younger and if I want be security consultant feel I really need to break into it now.

I just really don't know what to do my heart is into security so much but I am at the stage where I need a job ASAP and without no one taking a risk on me that I know will pay off in the end I feel I have little choice but to look for help desk roles or developer roles Sad
Logged
hayabusa
Hero Member
*****
Offline Offline

Posts: 1633



View Profile
« Reply #23 on: July 13, 2011, 01:57:55 PM »

Honestly, at least get your foot in the door somewhere, and start gaining experience in IT, even if not in a security role.  Where I live, there are virtually NO security roles in any available positions, near here.  So I have been working in a full-time, non-totally-security-related IT gig, and building up my expertise in security (both as it DOES come into play for my full-time job, as well as on the side, and in the evenings, doing my own thing.)  

I look at it like a poker game.  Sometimes, you have to take the hand that's dealt to you, and work to better it.  The difference is that, in the game of life, you actually get to beat the odds, by determining what cards you add to your hand, instead of having to always rely on luck.  Doesn't always mean it'll be easy, or that you'll come up with your winning hand, on the first or second try, but in the end, if it's truly the hand you want, sooner or later, you'll be able to fashion it, and collect the right cards, and get to where you want to be.
Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
millwalll
Guest
« Reply #24 on: July 13, 2011, 02:42:21 PM »

Thanks for the advice I have interview tomorrow and been busting my ass going over everything the last four days so If I don't get anywhere by end this month I think I start to look for any job and carry on working towards what I really want.
Logged
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1060


aka dynamik


View Profile WWW
« Reply #25 on: July 13, 2011, 11:58:02 PM »

Nice post Hayabusa. I was going to say something similar. It took me about six years of working my ass off on the network/systems side while studying security material on the side before I landed a full-time security job. It's very rare to go directly into security, and honestly, I don't think those people make the best security professionals (obviously there are exceptions) because they've never been on the other side of the fence. How can you secure something you don't understand? Being an admin/engineer really forces you to learn those systems/devices inside-and-out, which puts you in a great position when you're in a role to secure/audit them.
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
hell_razor
Jr. Member
**
Offline Offline

Posts: 90


View Profile
« Reply #26 on: July 14, 2011, 10:51:39 AM »

Thanks for the advice I have interview tomorrow and been busting my ass going over everything the last four days so If I don't get anywhere by end this month I think I start to look for any job and carry on working towards what I really want.

Good luck on the interview.  Also, don't forget to study up on the company itself and present yourself as knowledgeable of their business and product.  It does a long way sometimes.  And don't forget the soft skills, too.  They have to like you Smiley.
Logged

A+, Network+, Server+, CISSP, GSEC, GCIH, GPEN, GCIA, GISP, GCFW
millwalll
Guest
« Reply #27 on: July 17, 2011, 06:09:48 AM »

Thanks all, so I have had my interview with the company  I was in there for around 2.5 hours and I think it went good well. The company want to take on junior and train them up and they seem really good at it. You could just get really good feel in the interview how good they are at training they got lot answer out of me I didnt even know I knew.

Just got keep fingers crossed now !!!
Logged
dbest
Jr. Member
**
Offline Offline

Posts: 79


View Profile
« Reply #28 on: July 17, 2011, 06:25:28 AM »

Thanks all, so I have had my interview with the company  I was in there for around 2.5 hours and I think it went good well. The company want to take on junior and train them up and they seem really good at it. You could just get really good feel in the interview how good they are at training they got lot answer out of me I didnt even know I knew.

Just got keep fingers crossed now !!!

Awesome, good to hear! Keep us posted..
Logged

CISM, CEH, CISA, ISO 27001 LA
MaXe
Hero Member
*****
Offline Offline

Posts: 669


I've just upgraded myself to a cyborg muahahaa!!1


View Profile WWW
« Reply #29 on: July 19, 2011, 04:12:51 PM »

I have that site book marked, and on my links webpage (home page). but I actually like this one more.

http://en.wikipedia.org/wiki/Tcp_port_numbers

Nice, I typically used IANA a lot, and have been for many years:
http://www.iana.org/assignments/port-numbers

It's probably not as extensive as Wikipedia though  Smiley
Logged

I'm an InterN0T'er
Pages: 1 [2] 3   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.107 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.