[ASK] Cara scan port SSH yang sudah diubah portnya ?
#1
Salam Backtracker's , ane mau nanya nih, gmana ya cara scan port ssh yg udah diubah port defaultnya ?

Blush Blush
PHP Code:
_                       _             _     _ _             
| |                     | |           | |   (_|_)            
| |
__  _   _ _ __   __ _| | ___  _ __ | |__  _ _  __ _ _   _ 
'_ \| | | | '\ / _` | |/ _ \| '_ \| '_ \| | |/ _` | | | |
| |
_) | |_| | | | | (_| | | (_) | | | | | | | | | (_| | |_| |
|
_.__/ \__,_|_| |_|\__, |_|\___/|_| |_|_| |_|_| |\__,_|\__,_|
                    
__/ |                    _/ |            
                   |
___/                    |__

#2
nmap om Smile

#3
(07-14-2012, 11:43 PM)bunglonhijau Wrote: Salam Backtracker's , ane mau nanya nih, gmana ya cara scan port ssh yg udah diubah port defaultnya ?

Blush Blush

gunakan nmap, nti pasti muncul port yang aneh2, misalkan port 5566, tinggal coba di browser 192.168.1.1:5566, kalau muncul tulisan ssh berarti itu port ssh

#4
udah ane tes smua hasil scanning portnya di browser tpi gak dpat, Sad
ada cra lain om ??
PHP Code:
_                       _             _     _ _             
| |                     | |           | |   (_|_)            
| |
__  _   _ _ __   __ _| | ___  _ __ | |__  _ _  __ _ _   _ 
'_ \| | | | '\ / _` | |/ _ \| '_ \| '_ \| | |/ _` | | | |
| |
_) | |_| | | | | (_| | | (_) | | | | | | | | | (_| | |_| |
|
_.__/ \__,_|_| |_|\__, |_|\___/|_| |_|_| |_|_| |\__,_|\__,_|
                    
__/ |                    _/ |            
                   |
___/                    |__

#5
cukup pake nmap aja sih , set parameter nya untuk service fingerprint, jadi bisa kelihatan service apa yg jalan di port yg tebruka itu..
Code:
nmap -sV ip_router

#6
(07-15-2012, 10:37 PM)RR12 Wrote: cukup pake nmap aja sih , set parameter nya untuk service fingerprint, jadi bisa kelihatan service apa yg jalan di port yg tebruka itu..
Code:
nmap -sV ip_router
Quote:blum dpat bro,

Code:
root@bt:~# nmap -sV 192.168.88.254

Starting Nmap 5.35DC1 ( http://nmap.org ) at 2012-07-15 22:53 UTC
Nmap scan report for 192.168.88.254
Host is up (0.00046s latency).
Not shown: 991 closed ports
PORT      STATE SERVICE     VERSION
21/tcp    open  ftp         vsftpd 2.3.2
25/tcp    open  smtp        Postfix smtpd
53/tcp    open  domain      ISC BIND 9.7.3
80/tcp    open  http        Apache httpd 2.2.20 ((Ubuntu))
139/tcp   open  netbios-ssn Samba smbd 3.X (workgroup: OSPRONTGROUP)
443/tcp   open  ssl/http    Apache httpd 2.2.20 ((Ubuntu))
445/tcp   open  netbios-ssn Samba smbd 3.X (workgroup: OSPRONTGROUP)
3128/tcp  open  http-proxy  Squid webproxy 2.7.STABLE9
10000/tcp open  http        MiniServ 1.580 (Webmin httpd)
MAC Address: 00:27:0E:12:FA:90 (Intel Corporate)
Service Info: Host:  server; OS: Unix

Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 13.63 seconds
PHP Code:
_                       _             _     _ _             
| |                     | |           | |   (_|_)            
| |
__  _   _ _ __   __ _| | ___  _ __ | |__  _ _  __ _ _   _ 
'_ \| | | | '\ / _` | |/ _ \| '_ \| '_ \| | |/ _` | | | |
| |
_) | |_| | | | | (_| | | (_) | | | | | | | | | (_| | |_| |
|
_.__/ \__,_|_| |_|\__, |_|\___/|_| |_|_| |_|_| |\__,_|\__,_|
                    
__/ |                    _/ |            
                   |
___/                    |__

#7
gunakan hping bos.. nnti flag RA dan SA bisa membuktikan port2 terbuka tcp
FOLLOW @DutaLinux
for more question and sharing about security and Opensource only

#8
(07-16-2012, 01:29 AM)zee eichel Wrote: gunakan hping bos.. nnti flag RA dan SA bisa membuktikan port2 terbuka tcp

oke om zee... ane coba dulu, Smile Smile
PHP Code:
_                       _             _     _ _             
| |                     | |           | |   (_|_)            
| |
__  _   _ _ __   __ _| | ___  _ __ | |__  _ _  __ _ _   _ 
'_ \| | | | '\ / _` | |/ _ \| '_ \| '_ \| | |/ _` | | | |
| |
_) | |_| | | | | (_| | | (_) | | | | | | | | | (_| | |_| |
|
_.__/ \__,_|_| |_|\__, |_|\___/|_| |_|_| |_|_| |\__,_|\__,_|
                    
__/ |                    _/ |            
                   |
___/                    |__

#9
emang gug jalan kali ssh server nya ?? Big Grin

#10
(07-16-2012, 04:30 AM)RR12 Wrote: emang gug jalan kali ssh server nya ?? Big Grin

jalan bro, ane dah start ssh nya di server..
(07-16-2012, 01:29 AM)zee eichel Wrote: gunakan hping bos.. nnti flag RA dan SA bisa membuktikan port2 terbuka tcp

Quote:cara mnggunakan hping gmana om ??
ane tes pake cara ini :
Code:
root@bt:~# hping --scan 1-10000 -S 192.168.88.254 -f
Scanning 192.168.88.254 (192.168.88.254), port 1-10000
10000 ports to scan, use -V to see all the replies
+----+-----------+---------+---+-----+-----+
|port| serv name |  flags  |ttl| id  | win |
+----+-----------+---------+---+-----+-----+
   21 ftp        : .S..A...  64     0 14600
   25 smtp       : .S..A...  64     0 14600
   53 domain     : .S..A...  64     0 14600
   80 www        : .S..A...  64     0 14600
  139 netbios-ssn: .S..A...  64     0 14600
  221            : .S..A...  64     0 14600
  443 https      : .S..A...  64     0 14600
  445 microsoft-d: .S..A...  64     0 14600
3128            : .S..A...  64     0 14600
3790            : .S..A...  64     0 14600
All replies received. Done.
Not responding ports:
root@bt:~#

PHP Code:
_                       _             _     _ _             
| |                     | |           | |   (_|_)            
| |
__  _   _ _ __   __ _| | ___  _ __ | |__  _ _  __ _ _   _ 
'_ \| | | | '\ / _` | |/ _ \| '_ \| '_ \| | |/ _` | | | |
| |
_) | |_| | | | | (_| | | (_) | | | | | | | | | (_| | |_| |
|
_.__/ \__,_|_| |_|\__, |_|\___/|_| |_|_| |_|_| |\__,_|\__,_|
                    
__/ |                    _/ |            
                   |
___/                    |__






Users browsing this thread: 1 Guest(s)