|
 | 作者: kk2003 [kk2003]
 论坛用户 |
登录 |
| 前言:由于一次尝试加装WINDOWS服务,结果查看一下,打开的端口多得让 我吃惊.再自我扫描漏洞,也产生了几个"高危"漏洞.我相信现在我 是非常容易被入侵的. 操作:我只会开机后到服务里停用服务,至于什么自动,手动,禁用我并不 会更改.请多多指教,并详细点,谢谢..... 要求:更改后,能有一般黑客便用软件及网络命令的基本功能(我在学习), 能令本机不易被入侵. D:\>net start 已经启动以下 Windows 2000 服务: Automatic Updates COM+ Event System Computer Browser DHCP Client Distributed Link Tracking Client Distributed Transaction Coordinator DNS Client Event Log FTP Publishing Service IIS Admin Service IPSEC Policy Agent KVSrvXP Logical Disk Manager Message Queuing Network Connections NT LM Security Support Provider Plug and Play PPPoE Service Print Spooler Protected Storage Remote Access Connection Manager Remote Procedure Call (RPC) Removable Storage RIP Listener RunAs Service Security Accounts Manager Server Simple Mail Transport Protocol (SMTP) Simple TCP/IP Services SNMP Service System Event Notification Task Scheduler TCP/IP NetBIOS Helper Service Telephony Windows Management Instrumentation Windows Management Instrumentation Driver Extensions Workstation World Wide Web Publishing Service 命令成功完成。 |
| 地主 发表时间: 08/19 17:17 |
 | 回复: tommy_he [tommy_he]  版主 |
登录 |
|
没有什么多余的！ |
| B1层 发表时间: 08/19 19:01 |
| 回复: kk2003 [kk2003] 论坛用户 |
登录 |
|
但是这样，我打开了将近20个端口。。。。。。 135 137 138 139 445 3372。。。等等很多很多，还增加了几个高危漏洞，我相信极易被入侵。 有那些可以不要的？？？ |
| B2层 发表时间: 08/19 19:28 |
| 回复: tommy_he [tommy_he] 版主 |
登录 |
|
把所有口打出来！ |
| B3层 发表时间: 08/19 19:37 |
| 回复: kk2003 [kk2003] 论坛用户 |
登录 |
|
[开放端口] 端口13开放: Daytime [Banner] 20:28:06 2003-8-19 [End of banner] 端口17开放: Quote of the Day [Banner] "A wonderful fact to reflect upon, that every human creature is constituted to be that profound secret and mystery to every other." Charles Dickens (1812-70) [End of banner] 端口19开放: Character Generator [Banner] !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefg !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefgh "#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghi #$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghij $%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijk %&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijkl &'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklm '()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmn ()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmno )*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnop *+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopq +,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqr ,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrs -./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghij [End of banner] 端口21开放: FTP (Control) [Banner] 220 home-23cnc13yud Microsoft FTP Service (Version 5.0). [End of banner] 端口25开放: SMTP, Simple Mail Transfer Protocol [Banner] 220 home-23cnc13yud Microsoft ESMTP MAIL Service, Version: 5.0.2195.6713 ready at Tue, 19 Aug 2003 20:28:07 +0800 [End of banner] 端口110开放: Pop3, Post Office Protocol - Version 3 [Banner] [None] [End of banner] 端口80开放: HTTP, World Wide Web [Banner] HTTP/1.1 302 Object moved Server: Microsoft-IIS/5.0 Date: Tue, 19 Aug 2003 12:28:10 GMT Location: localstart.asp Connection: Keep-Alive Content-Length: 121 Content-Type: text/html Set-Cookie: ASPSESSIONIDAQACAQBT=FEINOLABBAKBFNJCICDPFPCC; path=/ Cache-control: private [End of banner] 端口7开放: Echo [Banner] [None] [End of banner] 端口9开放: Discard [Banner] [None] [End of banner] 端口135开放: Location Service [Banner] [None] [End of banner] 端口139开放: NETBIOS Session Service [Banner] [None] [End of banner] 端口443开放: HttpS, Secure HTTP [Banner] [None] [End of banner] 端口1025开放: network blackjack [Banner] [None] [End of banner] 端口1028开放: [Unknown service] [Banner] [None] [End of banner] 端口1026开放: [Unknown service] [Banner] [None] [End of banner] 端口1029开放: [Unknown service] [Banner] [None] [End of banner] 端口1801开放: [Unknown service] [Banner] [None] [End of banner] 端口2103开放: [Unknown service] [Banner] [None] [End of banner] 端口2105开放: [Unknown service] [Banner] [None] [End of banner] 端口2107开放: [Unknown service] [Banner] [None] [End of banner] 端口3372开放: [Unknown service] [Banner] [None] [End of banner] 端口7025开放: [Unknown service] [Banner] [None] [End of banner] 端口7080开放: [Unknown service] [Banner] [None] [End of banner] 端口7110开放: [Unknown service] [Banner] [None] [End of banner] 端口17开放: Quote of the Day [Banner] "Oh the nerves, the nerves; the mysteries of this machine called man! Oh the little that unhinges it, poor creatures that we are!" Charles Dickens (1812-70) [End of banner] 端口19开放: Character Generator [Banner] !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefg !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefgh "#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghi #$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghij $%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijk %&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijkl &'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklm '()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmn ()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmno )*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnop *+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopq +,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqr ,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrs -./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghij [End of banner] 插件类型: PORT 插件成员名称: 开放端口 插件作者: glacier 插件版本: 1.7 风险等级: 低 漏洞描述: "安全焦点"漏洞搜索引擎 "安全焦点"漏洞利用程序搜索引擎 -------------------------------------------------------------------------------- [Snmp信息] Snmp口令: public [Snmp系统信息]: sysDescr.0 = Hardware: x86 Family 6 Model 11 Stepping 4 AT/AT COMPATIBLE - Software: Windows 2000 Version 5.0 (Build 2195 Uniprocessor Free) sysUpTime.0 = 0 Days, 0 Hours, 6 Minutes, 45 Seconds sysContact.0 = sysName.0 = kkkk sysLocation.0 = sysServices.0 = 76 [Snmp界面信息]: ifNumber.0 = 3 ifIndex.0 = 1 ifDescr.0 = MS TCP Loopback interface ifType.0 = Loopback ifMtu.0 = 1500 ifSpeed.0 = 10000000 ifPhysicalAddress.0 = ifAdminStatus.0 = Working normally ifOperStatus.0 = Working normally ifLastChange.0 = 0 ifInOctets.0 = 3773373 ifInUcastPkts.0 = 62269 ifInNUcastPkts.0 = 0 ifInDiscards.0 = 0 ifInErrors.0 = 0 ifInUnknownProtos.0 = 0 ifOutOctets.0 = 3773373 ifOutUcastPkts.0 = 62269 ifOutNUcastPkts.0 = 0 ifOutDiscards.0 = 0 ifOutErrors.0 = 0 ifOutQLen.0 = 0 ifIndex.1 = 2 ifDescr.1 = Myson MTD80X Based Fast Ethernet Card ifType.1 = Ethernet Network ifMtu.1 = 1500 ifSpeed.1 = 100000000 ifPhysicalAddress.1 = ifAdminStatus.1 = Working normally ifOperStatus.1 = Working normally ifLastChange.1 = 0 ifInOctets.1 = 11676 ifInUcastPkts.1 = 0 ifInNUcastPkts.1 = 86 ifInDiscards.1 = 0 ifInErrors.1 = 0 ifInUnknownProtos.1 = 0 ifOutOctets.1 = 13202 ifOutUcastPkts.1 = 0 ifOutNUcastPkts.1 = 93 ifOutDiscards.1 = 0 ifOutErrors.1 = 0 ifOutQLen.1 = 0 ifIndex.2 = 3 ifDescr.2 = NTS PPPoE Adapter #1 ifType.2 = Ethernet Network ifMtu.2 = 1454 ifSpeed.2 = 10000000 ifPhysicalAddress.2 = DESTww ifAdminStatus.2 = Working normally ifOperStatus.2 = Working normally ifLastChange.2 = 11076 ifInOctets.2 = 15100 ifInUcastPkts.2 = 91 ifInNUcastPkts.2 = 35 ifInDiscards.2 = 0 ifInErrors.2 = 0 ifInUnknownProtos.2 = 0 ifOutOctets.2 = 16322 ifOutUcastPkts.2 = 73 ifOutNUcastPkts.2 = 38 ifOutDiscards.2 = 0 ifOutErrors.2 = 0 ifOutQLen.2 = 0 [Snmp-IP信息]: Address Net_Mask Bcast_Address Reasm_Max_Size 127.0.0.1 255.0.0.0 1 65535 169.254.*.* 255.255.0.0 1 65535 *.*.*.* 255.255.255.0 1 65535 [Snmp-TCP信息]: State Local Remote LISTEN 0.0.0.0: 7 0.0.0.0: 35048 LISTEN 0.0.0.0: 9 0.0.0.0: 2208 LISTEN 0.0.0.0: 13 0.0.0.0: 43011 LISTEN 0.0.0.0: 17 0.0.0.0: 10406 LISTEN 0.0.0.0: 19 0.0.0.0: 59531 LISTEN 0.0.0.0: 21 0.0.0.0: 2288 LISTEN 0.0.0.0: 25 0.0.0.0: 2139 LISTEN 0.0.0.0: 80 0.0.0.0: 26666 LISTEN 0.0.0.0: 135 0.0.0.0: 10300 LISTEN 0.0.0.0: 443 0.0.0.0: 2068 LISTEN 0.0.0.0: 445 0.0.0.0: 2128 LISTEN 0.0.0.0: 1025 0.0.0.0: 18490 LISTEN 0.0.0.0: 1026 0.0.0.0: 2224 LISTEN 0.0.0.0: 1028 0.0.0.0: 18574 LISTEN 0.0.0.0: 1029 0.0.0.0: 18638 LISTEN 0.0.0.0: 1031 0.0.0.0: 2230 LISTEN 0.0.0.0: 1801 0.0.0.0: 51437 LISTEN 0.0.0.0: 2103 0.0.0.0: 43101 LISTEN 0.0.0.0: 2105 0.0.0.0: 10309 LISTEN 0.0.0.0: 2107 0.0.0.0: 18552 LISTEN 0.0.0.0: 3372 0.0.0.0: 26768 LISTEN 0.0.0.0: 7025 0.0.0.0: 2128 LISTEN 0.0.0.0: 7080 0.0.0.0: 2125 LISTEN 0.0.0.0: 7110 0.0.0.0: 59495 TIME_WAIT 127.0.0.1: 1051 127.0.0.1: 7080 TIME_WAIT 127.0.0.1: 1083 127.0.0.1: 7025 TIME_WAIT 127.0.0.1: 1085 127.0.0.1: 7025 TIME_WAIT 127.0.0.1: 1140 127.0.0.1: 7080 TIME_WAIT 127.0.0.1: 1152 127.0.0.1: 7080 TIME_WAIT 127.0.0.1: 1172 127.0.0.1: 7110 TIME_WAIT 127.0.0.1: 3274 127.0.0.1: 7025 TIME_WAIT 127.0.0.1: 3298 127.0.0.1: 7025 TIME_WAIT 127.0.0.1: 3337 127.0.0.1: 7080 TIME_WAIT 127.0.0.1: 3368 127.0.0.1: 7110 TIME_WAIT 127.0.0.1: 7080 127.0.0.1: 3353 TIME_WAIT 127.0.0.1: 7110 127.0.0.1: 1176 TIME_WAIT 127.0.0.1: 7110 127.0.0.1: 3374 LISTEN 169.254.201.166: 139 0.0.0.0: 18502 TIME_WAIT *.*.*.*: 13 *.*.*.*: 1070 TIME_WAIT *.*.*.*: 13 *.*.*.*: 3286 TIME_WAIT *.*.*.*: 17 *.*.*.*: 1077 TIME_WAIT *.*.*.*: 17 *.*.*.*: 3290 TIME_WAIT *.*.*.*: 80 *.*.*.*: 3370 LISTEN *.*.*.*: 139 0.0.0.0: 2086 TIME_WAIT *.*.*.*: 1052 202.106.127.50: 80 TIME_WAIT *.*.*.*: 1059 *.*.*.*: 7 TIME_WAIT *.*.*.*: 1060 *.*.*.*: 7 TIME_WAIT *.*.*.*: 1062 *.*.*.*: 9 TIME_WAIT *.*.*.*: 1064 *.*.*.*: 9 TIME_WAIT *.*.*.*: 1081 *.*.*.*: 21 TIME_WAIT *.*.*.*: 1095 *.*.*.*: 25 TIME_WAIT *.*.*.*: 1165 *.*.*.*: 80 TIME_WAIT *.*.*.*: 1199 *.*.*.*: 135 TIME_WAIT *.*.*.*: 1203 *.*.*.*: 139 TIME_WAIT *.*.*.*: 1205 *.*.*.*: 135 TIME_WAIT *.*.*.*: 1210 *.*.*.*: 139 TIME_WAIT *.*.*.*: 1509 *.*.*.*: 443 TIME_WAIT *.*.*.*: 1512 *.*.*.*: 443 TIME_WAIT *.*.*.*: 2093 *.*.*.*: 1025 TIME_WAIT *.*.*.*: 2094 *.*.*.*: 1026 TIME_WAIT *.*.*.*: 2096 *.*.*.*: 1025 TIME_WAIT *.*.*.*: 2097 *.*.*.*: 1028 TIME_WAIT *.*.*.*: 2098 *.*.*.*: 1026 TIME_WAIT *.*.*.*: 2099 *.*.*.*: 1029 TIME_WAIT *.*.*.*: 2101 *.*.*.*: 1028 TIME_WAIT *.*.*.*: 2104 *.*.*.*: 1029 TIME_WAIT *.*.*.*: 2876 *.*.*.*: 1801 TIME_WAIT *.*.*.*: 2883 *.*.*.*: 1801 TIME_WAIT *.*.*.*: 3179 *.*.*.*: 2103 TIME_WAIT *.*.*.*: 3181 *.*.*.*: 2105 TIME_WAIT *.*.*.*: 3183 *.*.*.*: 2107 TIME_WAIT *.*.*.*: 3189 *.*.*.*: 2103 TIME_WAIT *.*.*.*: 3191 *.*.*.*: 2105 TIME_WAIT *.*.*.*: 3194 *.*.*.*: 2107 TIME_WAIT *.*.*.*: 3256 *.*.*.*: 7 TIME_WAIT *.*.*.*: 3258 *.*.*.*: 9 TIME_WAIT *.*.*.*: 3280 *.*.*.*: 7 TIME_WAIT *.*.*.*: 3282 *.*.*.*: 9 TIME_WAIT *.*.*.*: 3294 *.*.*.*: 21 TIME_WAIT *.*.*.*: 3322 *.*.*.*: 25 TIME_WAIT *.*.*.*: 3397 *.*.*.*: 135 TIME_WAIT *.*.*.*: 3399 *.*.*.*: 135 TIME_WAIT *.*.*.*: 3402 *.*.*.*: 139 TIME_WAIT *.*.*.*: 3404 *.*.*.*: 139 TIME_WAIT *.*.*.*: 3405 *.*.*.*: 443 TIME_WAIT *.*.*.*: 3406 *.*.*.*: 443 TIME_WAIT *.*.*.*: 4140 *.*.*.*: 7025 TIME_WAIT *.*.*.*: 4196 *.*.*.*: 7080 TIME_WAIT *.*.*.*: 4227 *.*.*.*: 7110 TIME_WAIT *.*.*.*: 4452 *.*.*.*: 3372 TIME_WAIT *.*.*.*: 4465 *.*.*.*: 3372 TIME_WAIT *.*.*.*: 7025 *.*.*.*: 4161 TIME_WAIT *.*.*.*: 7080 *.*.*.*: 4218 TIME_WAIT *.*.*.*: 7110 *.*.*.*: 4249 [Snmp-UDP信息]: Address Port 0.0.0.0 7 0.0.0.0 9 0.0.0.0 13 0.0.0.0 17 0.0.0.0 19 0.0.0.0 68 0.0.0.0 135 0.0.0.0 161 0.0.0.0 445 0.0.0.0 1027 0.0.0.0 1030 0.0.0.0 3430 0.0.0.0 3456 0.0.0.0 3527 169.254.201.166 137 169.254.201.166 138 169.254.201.166 500 169.254.201.166 520 169.254.201.166 4500 218.19.123.134 137 218.19.123.134 138 218.19.123.134 500 218.19.123.134 520 218.19.123.134 4500 [Snmp-Wins用户列表]: gggg Guest Administrator IUSR_HOME-23CNC13YUD 这个我没有加,是否已被入侵了? IWAM_HOME-23CNC13YUD 这个我没有加,是否已被入侵了? 插件类型: SNMP 插件成员名称: Snmp信息 插件作者: glacier 插件版本: 1.0 风险等级: 高 漏洞描述: "安全焦点"漏洞搜索引擎 "安全焦点"漏洞利用程序搜索引擎 -------------------------------------------------------------------------------- [FTP弱口令] ftp/[口令与用户名相同] 插件类型: FTP 插件成员名称: FTP弱口令 插件作者: glacier 插件版本: 1.1 风险等级: 高 漏洞描述: "安全焦点"漏洞搜索引擎 "安全焦点"漏洞利用程序搜索引擎 -------------------------------------------------------------------------------- [CGI漏洞] /iissamples/sdk/asp/docs/codebrws.asp [漏洞描述] /msadc/msadcs.dll [漏洞描述] 插件类型: HTTP 插件成员名称: CGI漏洞 插件作者: glacier 插件版本: 1.4 风险等级: 高 漏洞描述: "安全焦点"漏洞搜索引擎 "安全焦点"漏洞利用程序搜索引擎 我能不担心吗？?????????????? [此贴被 kk2003(kk2003) 在 08月19日20时59分 编辑过] [此贴被 kk2003(kk2003) 在 08月19日21时28分 编辑过] |
| B4层 发表时间: 08/19 20:56 |
| 回复: tommy_he [tommy_he] 版主 |
登录 |
|
打开你的防火墙，你的是太多了点！ 把你的邮件服务关了，还有认证也不要了！ |
| B5层 发表时间: 08/19 21:03 |
| 回复: kk2003 [kk2003] 论坛用户 |
登录 |
|
你看到那几个用户名吗？有两个不是我加的,是否被入侵了??? 还有高危漏动....... |
| B6层 发表时间: 08/19 21:16 |
| 回复: kk2003 [kk2003] 论坛用户 |
登录 |
|
为何的在注册表查找不到那两用户名... |
| B7层 发表时间: 08/19 21:17 |
| 回复: tommy_he [tommy_he] 版主 |
登录 |
|
设置复杂度和删了就可以了啥！ |
| B8层 发表时间: 08/19 21:32 |
|
20CN网络安全小组版权所有
Copyright © 2000-2010 20CN Security Group. All Rights Reserved.
论坛程序编写：NetDemon
粤ICP备05087286号
论坛: 电脑门诊
标题: !!!!请问我那些服务需要停用,我开的端口太多了!!!!!