THT DUYURU

 
 
Computer Security You can find Computer Security Systems articles, information about how everything from antivirus to firewalls works here.

Seçenekler

Finding Open Ports and Closing Them Off

Znéa - ait Kullanıcı Resmi (Avatar)
Kıdemli Üye
Üyelik tarihi:
07/2011
Mesajlar:
4.463
Konular:
1298
Teşekkür (Etti):
1744
Teşekkür (Aldı):
3847
Ticaret:
(0) %
0
1145
01-06-2020 15:55
#1
I'm going to talk about the ways to find open ports and close them off.
Open ports are typically used in physical connections that provide remote access to our computer. Any "data" can be sent to any machine connected through such these "ports" and the operation of this machine can be controlled. This is risky for users.
First of all, let's find out which ports are open on our computer.
Run cmd and type "netstat –an" on command line. Let's look at the open ports on your computer.
The most important ports can be listed as 139, 135, 445. When we gave the above command (cmd > netstat –an), let's say the following situation arose.

Il.Kr. Local Address Foreign Address Status

TCP 0.0.0.0:25 0.0.0:0 LISTENING

TCP 0.0.0.0:80 0.0.0.0:0 LISTENING

TCP 0.0.0.0:135 0.0.0.0:0 LISTENING

TCP 0.0.0.0:443 0.0.0.0:0 LISTENING

TCP 0.0.0.0:445 0.0.0.0:0 LISTENING

TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING

TCP 0.0.0.0:1110 0.0.0.0:0 LISTENING

TCP 127.0.0.1:1029 0.0.0.0:0 LISTENING

TCP 127.0.0.1:2783 127.0.0.1:1110 CLOSE_WAIT

TCP 192.168.1.33:139 0.0.0:0 LISTENING

TCP 192.168.1.33:2769 207.46.2.36:1863 ESTABLISHED

Here, status of the ports are shown as LISTENING. This will accept and connect to the request from a foreign address in listening mode.

Now let's show you how we can close these important ports.

CLOSING PORT 135
1-) Start > Run > Write 'Regedit' and open the 'Registry'.
2-) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Ole
3-) On the right, double-click 'EnableDCOM' data and change data value to N.
4-) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\RPC
5-) Double-click 'DCOM Protocols' on the right and delete only the data called 'ncacn_ip_tcp'.
6-) The process is complete. After restarting the PC, Start > Run > cmd > 'netstat –an' and you will see it's closed.

CLOSING PORT 139
This port have the most incoming attacks. If this port is open, your PC can be easily used and access to our PC via NetBios. To turn it off:
1-) My Network Connections (Right-click)
2-) Local Network Connection (Right-click)\\Properties\\double-click to Internet Protocols (TCP/IP).
3-) Click the advanced key, switch to the WINS tab.
4-) At the bottom, check to disable NetBOIS over TCP/IP, and then press OK.
5-) The process is complete. After restarting the PC, Start > Run > cmd > 'netstat –an' and you will see it's closed.

CLOSING PORT 445

1-) Start > Run > Regedit.
2-) HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Ser vic es\\NerBT\\Parameters
3-) Double-click the TransportBindName data on the right.
4-) Delete the -Device- entry in it.
5-) The process is complete. After restarting the PC, Start > Run > cmd > 'netstat –an' and you will see it's closed.

Original: https://www.turkhackteam.org/bilgisa...khackteam.html
Translator: @Tommy Angelo
---------------------
Bir Z klasiği..
RootAdam Teşekkür etti.

Bookmarks


« Önceki Konu | Sonraki Konu »
Seçenekler