HackNotes Windows Security Portable Reference phần 2 docx

Port Number Protocol Description

5800+ TCP VNC

5900+ TCP VNC

6272 TCP TROJAN secretservice

6667 TCP IRC (Internet Relay Chat) TROJAN various

6969 TCP TROJAN net controller

8000–8001 TCP HTTP Alternate

8080 TCP HTTP Alternate

8961 TCP TROJAN aok-backdoor

12345 TCP TROJAN netbus

Trend Micro virus management

17300 TCP TROJAN kuang-2

18181–7 TCP, UDP Checkpoint OPSEC

20034 TCP TROJAN netbus2

31337 UDP TROJAN backorifice

32771 TCP Solaris RPC portmapper (High)

33567–8 TCP TROJAN lionworm

33911 TCP TROJAN spirit

34324 TCP TROJAN big-gluck

36794 TCP TROJAN bugbear

37237 TCP TROJAN mantis

40421 TCP TROJAN agent-40421

43188 TCP ReachOut (remote control)

60008 TCP TROJAN lionworm

61348 TCP TROJAN bunker hill

61603 TCP TROJAN bunker hill

63485 TCP TROJAN bunker hill

65421 TCP TROJAN jade

Common Ports and Services RC 11

HackNote / Windows Security Portable Reference / O’Dea / 222785-0 / RefCenter Common Ports and Services Reference Center

P:\010Comp\HackNote\785-0\rc.vp

Friday, June 13, 2003 5:57:57 PM

Color profile: Generic CMYK printer profile

Composite Default screen

Common NetBIOS Name Table Definitions

NetBIOS Name Type Description

[nbname] <00> UNIQUE Workstation Service on host [nbname]

[domain] <00> GROUP System is member of [domain]

<\\--__MSBROWSE__> <01> GROUP Master Browser

[nbname] <01> UNIQUE

[nbname] <03> UNIQUE

Messenger Service

[username] <03> UNIQUE Messenger Service for user [username]

[nbname] <06> UNIQUE Remote Access Services

[nbname] <1F> UNIQUE Network DDE Service

[nbname] <20> UNIQUE (File) Server Service

[nbname] <21> UNIQUE Remote Access Services Client service

[nbname] <22> UNIQUE

[nbname] <23> UNIQUE

[nbname] <24> UNIQUE

Microsoft Exchange Interchange

Microsoft Exchange Store

Microsoft Exchange Directory

[nbname] <30> UNIQUE

[nbname] <31> UNIQUE

Modem Sharing Server

Modem Sharing Client

[nbname] <43> UNIQUE SMS Client Remote Control

[nbname] <44> UNIQUE SMS Administrator Remote Control Tool

[nbname] <45> UNIQUE SMS Client Remote Chat program

[nbname] <46> UNIQUE SMS Clients Remote Transfer service

[nbname] <6A> UNIQUE Microsoft Exchange Internet Mail

Connector service

[nbname] <87> UNIQUE Microsoft Exchange Mail Transfer Agent

[nbname] <BE> UNIQUE Network Monitor Agent

[nbname] <BF> UNIQUE Network Monitor Application

[domain] <1B> UNIQUE Domain Master Browser

[domain] <1C> GROUP Domain Controller

[domain] <1D> UNIQUE Master Browser

[domain] <1E> GROUP Browser Service Elections

<INet~Services> <1C> GROUP Internet Information Services

<IS~[nbname]> <00> UNIQUE Internet Information Services

RC 12 Reference Center

HackNote / Windows Security Portable Reference / O’Dea / 222785-0 / RefCenter

P:\010Comp\HackNote\785-0\rc.vp

Friday, June 13, 2003 5:57:58 PM

Color profile: Generic CMYK printer profile

Composite Default screen