.

What is so importatn about version numbers anyway?

<<

The New LT72884

User avatar

Newbie
Newbie

Posts: 33

Joined: Mon Jul 28, 2014 2:22 pm

Post Wed Jun 10, 2015 12:00 pm

What is so importatn about version numbers anyway?

Ello all. I have an odd question. I was watching a video on how to do the de-ice lvl 1.110 challenge because i am having issues with the image working correctly in vmplayer. However, i did not watch any of the actual how to. i just watched up to a point to ensure i wasnt crazy. Here is my odd question.

He/she performs a ncat 192.168.1.110 21 and the following shows up:

vsFTPd2.0.4

he/she then states that this is important to know

then ncat 192.168.1.110 22:

OPENSSH_4.x

ncat 192.168.1.110 80:

Allows: Get,Post,Options,Head,Trace

So why is it so vital to know that the server is running vsFTPd2.0.4 or openssh?? to me its just saying that it has ftp and ssh on it. no big deal? what is it about those versions im not aware of?

Thanks
<<

The New LT72884

User avatar

Newbie
Newbie

Posts: 33

Joined: Mon Jul 28, 2014 2:22 pm

Post Wed Jun 10, 2015 12:01 pm

Re: What is so importatn about version numbers anyway?

I also googled the version numbers and not finding out what is so great about them haha
<<

m0wgli

User avatar

Sr. Member
Sr. Member

Posts: 342

Joined: Fri Jul 20, 2012 3:34 pm

Post Wed Jun 10, 2015 3:18 pm

Re: What is so importatn about version numbers anyway?

The New LT72884 wrote:So why is it so vital to know that the server is running vsFTPd2.0.4 or openssh?? to me its just saying that it has ftp and ssh on it. no big deal? what is it about those versions im not aware of?


IIRC, service version is not important (for determining possible exploits), it's that those services are available to connect to.
<<

hayabusa

User avatar

Hero Member
Hero Member

Posts: 1702

Joined: Mon Jan 29, 2007 2:59 pm

Post Wed Jun 10, 2015 3:31 pm

Re: What is so importatn about version numbers anyway?

As mowgli noted, in this case, the key importance is in that you know the services are there.

The version IS important to grab, as a habit, though, where you can, as often times that'll lead you to a known exploit vector, etc.
~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
<<

The New LT72884

User avatar

Newbie
Newbie

Posts: 33

Joined: Mon Jul 28, 2014 2:22 pm

Post Wed Jun 10, 2015 10:04 pm

Re: What is so importatn about version numbers anyway?

Interesting. ok that makes more sense to me. I know that they are available to connect to, but the only problem is... how can i connect if i have no user name or password. I wish ftp was like routers where there was a basic log in like admin admin haha.

I do not want to watch the movie or askfor spoilers AT ALL!!! so please dont tell me any. I just dont no exactly where to look or research in my books. haha

thansk much and ill keep this thread open in case i run into an issue
<<

The New LT72884

User avatar

Newbie
Newbie

Posts: 33

Joined: Mon Jul 28, 2014 2:22 pm

Post Wed Jun 10, 2015 10:29 pm

Re: What is so importatn about version numbers anyway?

ok, so after like a 30 second exhausting, tiring google search, i discovered that there are 2 default usernames... ftp or anonymous with no password. this is used for most public servers according to microsoft and iis. it just "allows" "basic" options. so lets see if this server allows default username. dun dun dun. if it does, then ill browse around and be like "i have no idea what im looking for" hahaha

Return to Network Pen Testing

Who is online

Users browsing this forum: No registered users and 3 guests

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software