Duba buɗe tashar jiragen ruwa tare da NMap da matakan don kare kanmu

Ina kwana. A yau na kawo muku wasu kananan nasihu, za mu ga bude tashoshin jiragen ruwa da muke dasu. Don yin wannan zamuyi amfani da NMap don haka zamu ci gaba girka shi.

En Debian / Ubuntu:

# apt-get install nmap

to don ganin buɗe tashoshin jiragen ruwa akan pc. (A cikin gida)

#nmap localhost

Waɗannan su ne tashoshin jiragen ruwa da aka buɗe a cikin gida, ma'ana, ba lallai ne su shiga intanet ba. A nawa, 22 an buɗe don ssh kuma 25 don smtp.

Don ganin buɗe tashoshin jiragen ruwa akan pc ɗina amma akan intanet nakan yi daidai nmap amma tare da adireshin IP ɗina

A halin da nake ciki ya bayyana cewa mai masaukin yana kunne amma bai ga buɗe ƙofofin ba (1000 kawai yake dubawa). Wannan saboda duk da cewa tashar a bude take a pc dina, na'ura mai ba da hanya tsakanin hanyoyin sadarwa tana tace shi.

Amma idan na buɗe tashar tashar jirgin ruwa akan na'ura mai ba da hanya tsakanin hanyoyin sadarwa ...

Gaskiyar cewa zasu iya ganin kofofin da aka buɗe akan pc ɗina yana haifar da haɗari akan inji na. Don haka zan amintar da sabar ssh dina kadan. Saboda wannan zan canza tashar tashar (22) ta asali don kowane ...

Na tafi a matsayin tushen fayil ɗin / sauransu / ssh_config:

# nano /etc/ssh/ssh_config

muje inda yake cewa  # port 22 .. mukan goge # din mu canza tashar ta wanda muke so ..

muna bincika tare da CTRL-W. Muna adanawa tare da CTRL-O kuma muna rufe tare da CTRL-C ko CTRL-X

A halin na zan yi amfani da 2222

Muna yin hakan daidai don neman kalmar "tashar jiragen ruwa" a cikin fayil ɗin / sauransu / ssh / sshd_config  canza shi zuwa tashar da za mu yi amfani da ita. Yanzu muna gyara / sauransu / ayyuka

Muna neman ssh kuma mun canza tashoshin jiragen ruwa guda biyu zuwa wanda muka canza a baya.

Yanzu mun sake saita sabis.

Kuma muna yi yanci sake.

Kamar yadda kake gani. Babu wani abu game da tashar jirgin ruwa da / ko sabis ɗin ssh da ke fitowa.

Amma ssh yana aiki?

I MANA.

Abu mai mahimmanci shine idan zaku shiga daga wata kwamfutar, a bayyane yake dole ku nuna tashar da kuke amfani da ita.

ssh -p 2222 IP   (Misali)

Wataƙila lokacin amfani da tashar jiragen ruwa 2222 da nmap ya fito tare da wani abu tare da Ethernet-PC. Kawai nemi wani tashar da ta fi 1000 girma wanda ba a amfani da ita sosai
Don ganin jerin tashar jiragen ruwa da sabis ɗin da ke gudana, zaku iya zuwa a nan
Don ƙarin bayani game da nmap http://nmap.org/

Don haka zaka iya canza tashoshin kowane irin sabis.

Murna.!


Bar tsokaci

Your email address ba za a buga. Bukata filayen suna alama da *

*

*

  1. Wanda ke da alhakin bayanan: Miguel Ángel Gatón
  2. Manufar bayanan: Sarrafa SPAM, sarrafa sharhi.
  3. Halacci: Yarda da yarda
  4. Sadarwar bayanan: Ba za a sanar da wasu bayanan ga wasu kamfanoni ba sai ta hanyar wajibcin doka.
  5. Ajiye bayanai: Bayanin yanar gizo wanda Occentus Networks (EU) suka dauki nauyi
  6. Hakkoki: A kowane lokaci zaka iyakance, dawo da share bayanan ka.

  1.   Rariya m

    Godiya ga tip, mai ban sha'awa.

  2.   Alf m

    Kuma a cikin Mutanen Espanya? ha ha ha ha ha ha ha

    Wannan ilimin kimiyya ne, na gwada shi kuma bai sake haɗuwa da intanet ba, haha, wani abokina ya taimaka mini in warware shi bayan karanta labarin a cinyarsa, ya ƙaunace shi sosai kuma yana girka ubuntu a kwamfutar tafi-da-gidanka, lokacin da yace min ba nashi bane.

    gaisuwa

    1.    @Bbchausa m

      haha Ban san abin da kuka motsa ba daidai ba .. Amma na bayyana shi a bayyane kamar yadda zai yiwu. Amma idan kuna so zan iya yi muku bidiyo. 🙂

  3.   Alf m

    Naaaaah, an hana ni don hanyoyin sadarwa da Turanci, Ina son in koya koyaushe kuma ban sami malamin da ke haƙuri da ni ba, kuyi tunani.
    Koyar da mutum dan shekara 40 kamar ya shekara 10, hahahaha

    1.    @Bbchausa m

      haha Ba komai bane .. Tare da hango ko wani abu makamancin haka .. Tabbas kun fahimce ni.

      1.    chinoloco m

        Barka da zuwa wannan hangout !!
        ^^

  4.   Mista Linux m

    Manan ƙasa, kyakkyawan taimako.

  5.   tarkon m

    Na kuskura in ƙaddamar da wannan ƙalubalen don ganin idan tashar jiragen ruwa 2222 oO bai bayyana ba

    Gudu: sudo nmap -v -sS -A -p 1-65535 localhost

    PS: binciken zaiyi jinkiri ... Na kara zabin «-v» don kar ku gaji da kallon tashar ta komai.

    1.    @Bbchausa m

      A bayyane yake idan .. Amma ina magana ne akan sikanin al'ada. Nmap ɗin yana da zaɓuɓɓuka da fasaloli da yawa, sanin yadda ake amfani dashi. babu tashar jirgin ruwa da ta kubuce masa.

    2.    @Bbchausa m

      Bayan wannan akwai hanya koyaushe .. Musamman a cikin Linux, babu abin da ke da aminci gabaɗaya .. smallan ƙaramin bayani ne kawai: p

      1.    tarkon m

        Nufina ba don raina dabara ba amma umarnin nmap da na bari lokacin da mutum bai tuna tashar jiragen ruwa da aka zaba azaman maye gurbin ba yana da kyau (yana da wahala a tuna ips da tashar jiragen ruwa ...). A halin da nake ciki, dole ne in haɗa da nesa ta hanyar VNC zuwa PC inda tashar su ba irin ta 5900 ko 5901 ba ce; wani hoto na yau da kullun zai gaya mani babu tashar sauraren sauti don vnc to menene mafita? Amsa: Yi amfani da nmap ka tilasta shi ya bincika duk tashar jiragen ruwa. 😉

        1.    @Bbchausa m

          Tabbas, ban yi fushi da nisa da shi ba, mun san cewa komai ba shi da cikakken aminci. Akwai matakan tsaro kawai. Kuma koyaushe akwai wani abu da ya wuce ... koyaushe akwai wani abu da ya keta tsaro. Gudummawa ce mai kyau, kuna iya yin ɗan koyawa akan nmap. 🙂 Gaisuwa.

  6.   hexborg m

    Cikakken dacewa ga post na baya. Ban sani ba idan da gangan kuka yi shi ba, amma ya zama mai girma. 🙂

  7.   javitoper m

    Wannan kawai tsaro ne don ɓoyewa, abin takaici tare da zaɓi -v na nmap ɗin yana gano ku cewa tashar tashar da kuka sanya tayi daidai da nmap. Don ƙoƙarin kare kanku daga nmap, dole ne kuyi amfani da ƙa'idodin iptables, wanda ba zai iya kare hoton gaba ɗaya ba. Amma hey, yana aiki da sababbin masu shiga ba tare da izini ba ...

  8.   jpaul m

    Barka dai, tambaya, ban fahimci dalilin da yasa nmap baya cire tashar bayan ya canza ta, shin yana kawo zangon tashar ne don yin bincike ta tsoho?

    1.    @Bbchausa m

      Ee, nmap ta tsoho yana sikanin tashar jiragen ruwa 1000. Idan mun san yadda zamu iya sarrafa shi, wannan bai isa ba don kare ssh ko wani sabis daga damun niimar. Mafi kyawun zai zama gaza2ban da psad.

  9.   martin m

    @Bbchausa
    Bani dama inyi gyara game da abinda kuka sanya, ina gyara ne a sassan:

    1.
    "Waɗannan su ne tashoshin jiragen ruwa da aka buɗe a cikin gida, ma'ana, ba dole ba ne su shiga intanet. A halin da nake ciki, an buɗe 22 ga ssh kuma 25 ga smtp."
    Wannan ba haka bane. Waɗannan su ne tashar jiragen ruwa waɗanda aka buɗe a kan mai masaukin da za ku bincika a cikin kewayon tashar jiragen ruwa ta farko 1024, wanda shine zangon da NMAP ke yin bincike ta tsoho.

    "Waɗannan su ne tashoshin jiragen ruwa da aka buɗe a cikin gida, ma'ana, ba lallai ba ne su shiga intanet .."
    Ya kamata ka fayyace cewa hanyar da ba za su iya "fita" zuwa raga ba ita ce ta zama na'urarka a cikin hanyar ninkaya (NAT ta ma’anarta ita kuma ita ce katuwar katuwar wuta) kuma idan dai ba a buɗe tashoshin jiragen ruwa ba na'urar da ke yin NAT (galibi mai ba da hanya tsakanin hanyoyin sadarwa) da kuma turawa (GABATARWA) waɗannan mashigai suna buɗe wa injin ka.
    Tabbas, idan na'urar tana haɗe kai tsaye ga modem to IS ta fallasa net ɗin.
    Zuwa ga umarnin da aka buga ta @taregon, wanda shine daidai don bincika da matsa dukkan mashigai na mashin, zaku iya ƙarawa, a tsakanin sauran zaɓuɓɓuka, -sV don nmap yayi ƙoƙari ya gano wane sabis yake gudana a kowace tashar jiragen ruwa: sudo nmap -v -sS -sV -A -p 1-65535 localhost
    Alal misali:
    Fara Nmap 6.25 ( http://nmap.org ) a 2012-12-06 13:39 FASAHA
    Rahoton binciken Nmap na localhost.localdomain (127.0.0.1)
    Mai watsa shiri ya ƙare (latency 0.00021s).
    Ba a nuna ba: An rufe tashar jiragen ruwa 999
    FASADAR HIDIMAR JIHAR PORT
    631 / tcp bude ipp CUPS 1.6
    2222 / tcp bude ssh OpenSSH 6.1 (ladabi na 2.0)

    2.
    «Gaskiyar cewa zasu iya ganin kofofin da aka buɗe akan pc ɗina yana da haɗari akan inji na. Don haka zan amintar da sabar ssh dina kadan. Saboda wannan zan canza tashar tashar (22) ta asali don kowane ...

    Na tafi a matsayin tushen ga fayil / sauransu / ssh_config:

    # nano / sauransu / ssh / ssh_config

    muje inda aka ce # tashar 22 .. mukan goge # kuma mu canza tashar ga wanda muke so .. »

    A'A! Abu ɗaya ba shi da alaƙa da ɗayan!
    / sauransu / ssh / ssh_config ke kula da zaɓin abokin ciniki kawai don haka tashar tashar da kuka saita can za ta kasance wacce abokin ciniki ssh ke amfani da shi ta hanyar tsoho don haɗi zuwa sabobin ssh maimakon tashar tashar jiragen ruwa 22.

    Kuna canza canjin sauraren sauraren da kuke nema kawai ta hanyar canza zaɓin da aka ambata a cikin fayil ɗin / etc / ssh / sshd_config.

    Aƙarshe, da wannan kayan aikin yanar gizon zamu iya gwada kofofin ko waɗanda basa buɗe akan injinmu, waɗanda suke ɓoye, bincika cewa ping echo nakasa da wasu abubuwa: https://www.grc.com/x/ne.dll?bh0bkyd2

    Na gode.

  10.   fenriz m

    Kyakkyawan bita. na so godiya 😀

  11.   kumares m

    Babban koyawa na yanci
    Gaisuwa !!!

  12.   Sera m

    abokan aiki, akwai wanda ya san yadda zan yi don sanin buɗe tashar jirgin wani mutum ??? daga kwamfutata ???

    1.    Adrian m

      Yi amfani da umarnin: nmap XXXX
      Inda x's sune ip na kwamfutar don yin sikanin

  13.   Adrian m

    Barka dai, da farko dai godiya ga rabawa.
    Ina da matsala, da fatan za ku iya taimaka min: Lokacin da nake yin kyau tare da ip daga wannan injin, yana nuna cewa tashar 3306 a buɗe take kuma da netstat na ga cewa tashar tana sauraro; Koyaya, yayin yin hoto tare da nmap daga wata pc ba yana nuna buɗe tashar jirgin ruwa 3306.
    Hakanan na riga na canza adireshin bin-layi zuwa 0.0.0.0
    Ina ƙoƙarin haɗa aikace-aikacen java tare da DB akan sabar LAMP kuma aikace-aikacen suna aiki saboda na riga na yi tambayoyi a kan wani pc inda na saita sabar wamp don gwaji kuma komai yayi daidai.
    Duk wani ra'ayi? Ban san abin da zan yi ba