Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 47 guests and 1 member online
You are here:
Home
Resources
Career Central
Its all about Ports
EH-Net
May 24, 2013, 02:19:29 PM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Resources
>
Career Central
(Moderator:
don
) >
Its all about Ports
Pages:
1
[
2
]
3
Go Down
« previous
next »
Print
Author
Topic: Its all about Ports (Read 19164 times)
0 Members and 1 Guest are viewing this topic.
chrisj
Hero Member
Offline
Posts: 1163
Re: Its all about Ports
«
Reply #15 on:
July 10, 2011, 02:21:10 AM »
I have that site book marked, and on my links webpage (home page). but I actually like this one more.
http://en.wikipedia.org/wiki/Tcp_port_numbers
Logged
OSWP, Sec+
millwalll
Guest
Re: Its all about Ports
«
Reply #16 on:
July 10, 2011, 04:36:19 PM »
I have seen both them sites before and both great resources do you think I could take them into interview with me lol
Or you think my answer for every question should be GOOGLE IS YOUR FRIEND!!
Logged
lorddicranius
Sr. Member
Offline
Posts: 447
Re: Its all about Ports
«
Reply #17 on:
July 10, 2011, 04:48:29 PM »
Quote from: dynamik on July 10, 2011, 01:49:37 AM
Also, check out the nmap-services file. They list the "popularity" of each service.
That's a good tip! I was thinking about this more and remembered watching an old DEFCON talk with Fyodor and him mentioning how they've implemented the ability to scan more frequently used ports rather than either scanning them all or having to specify ports. I was wondering how they did that, because then you could just check to see which ports are scanned in a scan that just does the top 1000 most frequently used. I had never actually looked at the nmap-services file before, but I think that the frequency column there is what's actually used to accomplish this..?
Anyway, came up with a quick single-line command that'd show you the most common open ports according to Fyodor's MANY random scans used for statistical analysis:
Code:
sort -r -t " " -k3 /usr/local/share/nmap/nmap-services
The white space in between the double quotes is actually a tab (CTRL+v <TAB>). This will sort the frequency column putting the most frequently opened ports at the top, least frequently opened ports at the bottom, instead of being ordered by port numbers.
«
Last Edit: July 10, 2011, 04:50:00 PM by lorddicranius
»
Logged
GSEC, eCPPT, Sec+
chrisj
Hero Member
Offline
Posts: 1163
Re: Its all about Ports
«
Reply #18 on:
July 10, 2011, 09:42:07 PM »
Quote from: Jamie.R on July 10, 2011, 04:36:19 PM
I have seen both them sites before and both great resources do you think I could take them into interview with me lol
Or you think my answer for every question should be GOOGLE IS YOUR FRIEND!!
I've gotten a mixed bag on that one. I've said, what I don't know, I'm good at finding online with Google. I've only had one person ask me, but what if the internet is down? To which I said, I' turn to my physical library that I keep at my desk. Then listed the few books I usually keep at work or in my backpack as reference books.
Logged
OSWP, Sec+
j0rDy
Hero Member
Offline
Posts: 590
Re: Its all about Ports
«
Reply #19 on:
July 11, 2011, 03:35:47 AM »
Quote from: chrisj on July 10, 2011, 09:42:07 PM
Quote from: Jamie.R on July 10, 2011, 04:36:19 PM
I have seen both them sites before and both great resources do you think I could take them into interview with me lol
Or you think my answer for every question should be GOOGLE IS YOUR FRIEND!!
I've gotten a mixed bag on that one. I've said, what I don't know, I'm good at finding online with Google. I've only had one person ask me, but what if the internet is down? To which I said, I' turn to my physical library that I keep at my desk. Then listed the few books I usually keep at work or in my backpack as reference books.
if you are doing a webapp audit, and the internet is down, you have alot more to worry about then looking up ports
The more i think about it its a pretty good interviewing method. it shows how resourceful you are in solving problems and clearly most of the questions are not to be taken literally, and should be read between the lines. interviewing (especially job interviewing) is a whole different subject and mastering it is a skill and takes years of practice, just as hacking...
Logged
ISC2 Associate, CEH, ECSA, OSCP, OSWP
earning my stripes appears to be a road i must travel alone...with a little help of EH.net
hayabusa
Hero Member
Offline
Posts: 1633
Re: Its all about Ports
«
Reply #20 on:
July 11, 2011, 11:26:28 AM »
When I interview, I ALWAYS want to get a feel for a person's capabilities - not only their memorization and book knowledge, but their common-sense. I won't always discount someone, based solely on a lack of memorization (although, depending on the questions, if they really blow even the simple ones, their chances of moving forward in the interview are slim.) I like to hear folks admit when they'll go to another person or resource to get an answer. In fact, I'd much rather hear them go to that, quickly, than to sit and BS with me, and try to play around the fact that they don't know what I'm asking for, etc.
As we'd said in another thread a while back, the biggest thing is to be open and honest in what you know and don't know, and the same with regard to your experience(s) While you may not land some dream job, right away, because you don't have something, for that same reason, you might not bury yourself into something that you won't understand, and that will hinder your future prospects and opportunities. I'd much rather hire / place someone into a junior position, and help them grow, then hire them into a senior position, only to watch them fail miserably, cause harm to my company (or my clients' companies,) and have bad experiences, all around.
Logged
~ hayabusa ~
"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'
OSCE, OSCP , GPEN, C|EH
ajohnson
Recruiters
Hero Member
Offline
Posts: 1060
aka dynamik
Re: Its all about Ports
«
Reply #21 on:
July 12, 2011, 11:53:16 PM »
Quote from: hayabusa on July 11, 2011, 11:26:28 AM
When I interview, I ALWAYS want to get a feel for a person's capabilities - not only their memorization and book knowledge, but their common-sense. I won't always discount someone, based solely on a lack of memorization (although, depending on the questions, if they really blow even the simple ones, their chances of moving forward in the interview are slim.) I like to hear folks admit when they'll go to another person or resource to get an answer. In fact, I'd much rather hear them go to that, quickly, than to sit and BS with me, and try to play around the fact that they don't know what I'm asking for, etc.
As we'd said in another thread a while back, the biggest thing is to be open and honest in what you know and don't know, and the same with regard to your experience(s) While you may not land some dream job, right away, because you don't have something, for that same reason, you might not bury yourself into something that you won't understand, and that will hinder your future prospects and opportunities. I'd much rather hire / place someone into a junior position, and help them grow, then hire them into a senior position, only to watch them fail miserably, cause harm to my company (or my clients' companies,) and have bad experiences, all around.
I enjoy seeing people show their true selves. Our network team was recently looking for an additional person, and I got pulled into one of the interviews because the candidate had security experience, and they wanted me to evaluate that.
Our systems guys are always bitching about the number of VLANs and our network topology. They told him about this and asked him how he would respond. He simply said, "I'd create more VLANs." We all cracked up and he got a job offer shortly afterwards.
Note: He ACED all the other questions, but we work in a high-stress environment, so seeing someone have the guts and sense of humor to take a chance and make a joke during an interview went a long way for us. Stuff like this obviously depends on the environment, but it's another example of how being genuine will ultimately help you land the role you want.
Logged
WIP: GCFA |
www.infosiege.net
| @infosiege
The day you stop learning is the day you start becoming obsolete.
millwalll
Guest
Re: Its all about Ports
«
Reply #22 on:
July 13, 2011, 06:54:25 AM »
I have had a few interview and I always seem to mess it up. They ask me stuff what I know but for some reason in a interview I just can not pick it out of my head.
I just find it really frustrating as I know I could be a extremely good security consultant. I just need some guidance and some help to get me on the right path. I learn a lot faster by doing something than reading about it this why getting job so important to me as I would learn very fast.
In all my jobs to date I have been there less time than people who have worked there for years. And they come to me for help as I know all the answer. Just because I want be best I can and give 200% to know everything I can and put extra work in to learn new stuff.
I just don't know what to? how I can give a better interview? when the question that are asked are so broad. And half the time they ask me a question on something I have not done yet. I always tell them I have not done this yet but they still seem to want to ask more about it.
I just feel like I am kinder stuck as the only way to progress is to learn more stuff the best way for me to do this is hands on or course but I cant afford the courses so I need a job.
However if no one willing to have the guts to give me a try I feel that I have to give up on working in security and go for a job that I can do but wont enjoy. A big problem as well is my age I am not getting any younger and if I want be security consultant feel I really need to break into it now.
I just really don't know what to do my heart is into security so much but I am at the stage where I need a job ASAP and without no one taking a risk on me that I know will pay off in the end I feel I have little choice but to look for help desk roles or developer roles
Logged
hayabusa
Hero Member
Offline
Posts: 1633
Re: Its all about Ports
«
Reply #23 on:
July 13, 2011, 01:57:55 PM »
Honestly, at least get your foot in the door somewhere, and start gaining experience in IT, even if not in a security role. Where I live, there are virtually NO security roles in any available positions, near here. So I have been working in a full-time, non-totally-security-related IT gig, and building up my expertise in security (both as it DOES come into play for my full-time job, as well as on the side, and in the evenings, doing my own thing.)
I look at it like a poker game. Sometimes, you have to take the hand that's dealt to you, and work to better it. The difference is that, in the game of life, you actually get to beat the odds, by determining what cards you add to your hand, instead of having to always rely on luck. Doesn't always mean it'll be easy, or that you'll come up with your winning hand, on the first or second try, but in the end, if it's truly the hand you want, sooner or later, you'll be able to fashion it, and collect the right cards, and get to where you want to be.
Logged
~ hayabusa ~
"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'
OSCE, OSCP , GPEN, C|EH
millwalll
Guest
Re: Its all about Ports
«
Reply #24 on:
July 13, 2011, 02:42:21 PM »
Thanks for the advice I have interview tomorrow and been busting my ass going over everything the last four days so If I don't get anywhere by end this month I think I start to look for any job and carry on working towards what I really want.
Logged
ajohnson
Recruiters
Hero Member
Offline
Posts: 1060
aka dynamik
Re: Its all about Ports
«
Reply #25 on:
July 13, 2011, 11:58:02 PM »
Nice post Hayabusa. I was going to say something similar. It took me about six years of working my ass off on the network/systems side while studying security material on the side before I landed a full-time security job. It's very rare to go directly into security, and honestly, I don't think those people make the best security professionals (obviously there are exceptions) because they've never been on the other side of the fence. How can you secure something you don't understand? Being an admin/engineer really forces you to learn those systems/devices inside-and-out, which puts you in a great position when you're in a role to secure/audit them.
Logged
WIP: GCFA |
www.infosiege.net
| @infosiege
The day you stop learning is the day you start becoming obsolete.
hell_razor
Jr. Member
Offline
Posts: 90
Re: Its all about Ports
«
Reply #26 on:
July 14, 2011, 10:51:39 AM »
Quote from: Jamie.R on July 13, 2011, 02:42:21 PM
Thanks for the advice I have interview tomorrow and been busting my ass going over everything the last four days so If I don't get anywhere by end this month I think I start to look for any job and carry on working towards what I really want.
Good luck on the interview. Also, don't forget to study up on the company itself and present yourself as knowledgeable of their business and product. It does a long way sometimes. And don't forget the soft skills, too. They have to like you
.
Logged
A+, Network+, Server+, CISSP, GSEC, GCIH, GPEN, GCIA, GISP, GCFW
millwalll
Guest
Re: Its all about Ports
«
Reply #27 on:
July 17, 2011, 06:09:48 AM »
Thanks all, so I have had my interview with the company I was in there for around 2.5 hours and I think it went good well. The company want to take on junior and train them up and they seem really good at it. You could just get really good feel in the interview how good they are at training they got lot answer out of me I didnt even know I knew.
Just got keep fingers crossed now !!!
Logged
dbest
Jr. Member
Offline
Posts: 79
Re: Its all about Ports
«
Reply #28 on:
July 17, 2011, 06:25:28 AM »
Quote from: Jamie.R on July 17, 2011, 06:09:48 AM
Thanks all, so I have had my interview with the company I was in there for around 2.5 hours and I think it went good well. The company want to take on junior and train them up and they seem really good at it. You could just get really good feel in the interview how good they are at training they got lot answer out of me I didnt even know I knew.
Just got keep fingers crossed now !!!
Awesome, good to hear! Keep us posted..
Logged
CISM, CEH, CISA, ISO 27001 LA
MaXe
Hero Member
Offline
Posts: 669
I've just upgraded myself to a cyborg muahahaa!!1
Re: Its all about Ports
«
Reply #29 on:
July 19, 2011, 04:12:51 PM »
Quote from: chrisj on July 10, 2011, 02:21:10 AM
I have that site book marked, and on my links webpage (home page). but I actually like this one more.
http://en.wikipedia.org/wiki/Tcp_port_numbers
Nice, I typically used IANA a lot, and have been for many years:
http://www.iana.org/assignments/port-numbers
It's probably not as extensive as Wikipedia though
Logged
I'm an InterN0T'er
Pages:
1
[
2
]
3
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
Tools
: Symbolic Exploit Assistant project is looking for collaborators
(0) by
galapag0
Greetings
: Hi from the UK
(5) by
prats84
GCIH - GIAC Certified Incident Handler
: Passed my GCIH
(9) by
prats84
Network Pen Testing
: Want a challenge? Want a GXPN practice exam?
(0) by
ajohnson
News Items and General Discussion About EH-Net
: Change is Coming to EH-Net!!
(29) by
ajohnson
GCIH - GIAC Certified Incident Handler
: GCIH Free Practice test attempt
(1) by
prats84
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.