Security Basics mailing list archives
Re: Hidden Ports
From: Geoff Beier <geoff () mollyandgeoff com>
Date: Tue, 03 Feb 2004 15:21:25 -0500
Eduardo Sorensen wrote:
A backdoor could certainly be constructed that way, though I'm not aware of any that are "out of the box". For example, I could build a backdoor that does not listen on any port until it detects connection attempts to closed ports 1026,1027,1029,1034,1026,1044 and 1035 in that sequence within 5 seconds, then listens on port 60006 for 10 seconds.Can a port scanner not see a port that is opened? The question is: can a backdoor be on a machine, and with nmap -p 1-, for example, you couldn't see it?
Here's a site that describes the concept in more detail: http://www.portknocking.org/Like I said, though, I'm not aware of any specific backdoor (other than one I've seen built in a lab :-)) that does this.
Regards, Geoff ---------------------------------------------------------------------------Ethical Hacking at InfoSec Institute. Mention this ad and get $720 off any course! All of our class sizes are guaranteed to be 10 students or less. We provide Ethical Hacking, Advanced Ethical Hacking, Intrusion Prevention, and many other technical hands on courses. Visit us at http://www.infosecinstitute.com/securityfocus to get $720 off any course! ----------------------------------------------------------------------------
Current thread:
- Hidden Ports Eduardo Sorensen (Feb 03)
- Re: Hidden Ports Alejandro Flores (Feb 04)
- Re: Hidden Ports Geoff Beier (Feb 04)
- RE: Hidden Ports Dimitri Bertolami (Feb 04)
- RE: Hidden Ports nate (Feb 04)
- Re: Hidden Ports Jamie Pratt (Feb 06)
- Re: Hidden Ports David J. Bianco (Feb 04)
- Re: Hidden Ports Michael Painter (Feb 05)
- Re: Hidden Ports David J. Bianco (Feb 05)
- Re: Hidden Ports Michael Painter (Feb 06)
- Re: Hidden Ports Michael Painter (Feb 05)
- Re: Hidden Ports vrsnet (Feb 06)
- Necessary ports and not necessary ports Benawi (Feb 05)
- Securing Windows Server 2003 [was: Necessary ports and not necessary ports] Joey Peloquin (Feb 05)