Re: [PEN-TEST] ports

["Frasnelli, Dan" <dfrasnel () COREWAR COM>]

> > but it is not complete.  Specifically, I am trying to find out what runs
> > on ports 6010 and 6011 on linux boxes.
>
> x11               6010/tcp              # x window system
> x11               6010/udp              # x window system
> x11               6011/tcp              # x window system
> x11               6011/udp              # x window system

A bit busy at the moment, so hopefully this 'quick' explanation
is sufficient.

When you enable X11 forwarding with ssh, each session is allocated
a unique display - typically starting at :1 or :10.  These
displays correspond to ports 6001 and 6010, respectively.

Just some trivia you may not know about X11 forwarding:
- the X11 traffic is not sent through an encrypted channel
- a remote user can 'spy' on an ssh session under certain
  circumstances by reading off those ports (ie. xkey).

-dan