Kullanıcı1233
Kıdemli Üye
- 19 Tem 2011
- 4,371
- 12
I'm going to talk about the ways to find open ports and close them off.
Open ports are typically used in physical connections that provide remote access to our computer. Any "data" can be sent to any machine connected through such these "ports" and the operation of this machine can be controlled. This is risky for users.
First of all, let's find out which ports are open on our computer.
Run cmd and type "netstat an" on command line. Let's look at the open ports on your computer.
The most important ports can be listed as 139, 135, 445. When we gave the above command (cmd > netstat an), let's say the following situation arose.
Il.Kr. Local Address Foreign Address Status
TCP 0.0.0.0:25 0.0.0:0 LISTENING
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:443 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1110 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1029 0.0.0.0:0 LISTENING
TCP 127.0.0.1:2783 127.0.0.1:1110 CLOSE_WAIT
TCP 192.168.1.33:139 0.0.0:0 LISTENING
TCP 192.168.1.33:2769 207.46.2.36:1863 ESTABLISHED
Here, status of the ports are shown as LISTENING. This will accept and connect to the request from a foreign address in listening mode.
Now let's show you how we can close these important ports.
CLOSING PORT 135
1-) Start > Run > Write 'Regedit' and open the 'Registry'.
2-) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Ole
3-) On the right, double-click 'EnableDCOM' data and change data value to N.
4-) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\RPC
5-) Double-click 'DCOM Protocols' on the right and delete only the data called 'ncacn_ip_tcp'.
6-) The process is complete. After restarting the PC, Start > Run > cmd > 'netstat an' and you will see it's closed.
CLOSING PORT 139
This port have the most incoming attacks. If this port is open, your PC can be easily used and access to our PC via NetBios. To turn it off:
1-) My Network Connections (Right-click)
2-) Local Network Connection (Right-click)\\Properties\\double-click to Internet Protocols (TCP/IP).
3-) Click the advanced key, switch to the WINS tab.
4-) At the bottom, check to disable NetBOIS over TCP/IP, and then press OK.
5-) The process is complete. After restarting the PC, Start > Run > cmd > 'netstat an' and you will see it's closed.
CLOSING PORT 445
1-) Start > Run > Regedit.
2-) HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Ser vic es\\NerBT\\Parameters
3-) Double-click the TransportBindName data on the right.
4-) Delete the -Device- entry in it.
5-) The process is complete. After restarting the PC, Start > Run > cmd > 'netstat an' and you will see it's closed.
Original: https://www.turkhackteam.org/bilgisayar-guvenligi/953179-acik-portlar-ve-kapatma-turkhackteam.html
Open ports are typically used in physical connections that provide remote access to our computer. Any "data" can be sent to any machine connected through such these "ports" and the operation of this machine can be controlled. This is risky for users.
First of all, let's find out which ports are open on our computer.
Run cmd and type "netstat an" on command line. Let's look at the open ports on your computer.
The most important ports can be listed as 139, 135, 445. When we gave the above command (cmd > netstat an), let's say the following situation arose.
Il.Kr. Local Address Foreign Address Status
TCP 0.0.0.0:25 0.0.0:0 LISTENING
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:443 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1110 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1029 0.0.0.0:0 LISTENING
TCP 127.0.0.1:2783 127.0.0.1:1110 CLOSE_WAIT
TCP 192.168.1.33:139 0.0.0:0 LISTENING
TCP 192.168.1.33:2769 207.46.2.36:1863 ESTABLISHED
Here, status of the ports are shown as LISTENING. This will accept and connect to the request from a foreign address in listening mode.
Now let's show you how we can close these important ports.
CLOSING PORT 135
1-) Start > Run > Write 'Regedit' and open the 'Registry'.
2-) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Ole
3-) On the right, double-click 'EnableDCOM' data and change data value to N.
4-) HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\RPC
5-) Double-click 'DCOM Protocols' on the right and delete only the data called 'ncacn_ip_tcp'.
6-) The process is complete. After restarting the PC, Start > Run > cmd > 'netstat an' and you will see it's closed.
CLOSING PORT 139
This port have the most incoming attacks. If this port is open, your PC can be easily used and access to our PC via NetBios. To turn it off:
1-) My Network Connections (Right-click)
2-) Local Network Connection (Right-click)\\Properties\\double-click to Internet Protocols (TCP/IP).
3-) Click the advanced key, switch to the WINS tab.
4-) At the bottom, check to disable NetBOIS over TCP/IP, and then press OK.
5-) The process is complete. After restarting the PC, Start > Run > cmd > 'netstat an' and you will see it's closed.
CLOSING PORT 445
1-) Start > Run > Regedit.
2-) HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Ser vic es\\NerBT\\Parameters
3-) Double-click the TransportBindName data on the right.
4-) Delete the -Device- entry in it.
5-) The process is complete. After restarting the PC, Start > Run > cmd > 'netstat an' and you will see it's closed.
Original: https://www.turkhackteam.org/bilgisayar-guvenligi/953179-acik-portlar-ve-kapatma-turkhackteam.html
Translator: Tommy Angelo
