Re: Next step? next tool?
Quote:
Originally posted here by w-mellon
Recently downloaded Nmapwin and ran scan tests on my local communications equipment. I have found open ports that really shouldn't be there. Next step is to test vulnerability (can they be connected to and what - if anything - from this connection may cause improper operation). Is there a win-based tool to test connections to these ports? Can this be done with Nmap?
thanks
Well, for vulnerability scanning you have a number of options: if you have a Linux box, you can run Nessus, if you are Windows based you may want to look at Retina from EEye. But, you can use tools such as Netcat to connect to some of those ports. It sounds like you probably have a number of default configurations on those machines.
Nessus Home: http://www.nessus.org
Retina Home: http://www.eeye.com
If it were me, my next step would be to look into installing firewalls (software firewalls on the boxes, hardware firewalls to protect the network). I'd want to get all holes that are open which shouldn't be closed as soon as possible (either by shutting services down and/or installing firewalls to watch over the machines). After locking down and securing (firewalling, patching, AV protection, etc), then I'd look into testing for vulnerabilities that still may be around.
Like I said, I'd look at this from proactive standpoint..