Skip to content

Posts tagged: #security

Ports tied to trojans, backdoors and C2 — NetBus, Back Orifice, ingreslock, Meterpreter and abused legit services — and how to detect a compromise.
A scannable reference of common TCP and UDP ports grouped by purpose — web, mail, file transfer, remote access, databases, and infrastructure.
The internet-facing ports attackers hit first — RDP, SSH, SMB, databases — and the single most important hardening step for each.
How reflection and amplification DDoS attacks abuse UDP services like DNS, NTP, SNMP, SSDP and Memcached — with amplification factors and how to avoid being a reflector.
DNS uses port 53 over both UDP and TCP, with DNS-over-TLS on 853, mDNS on 5353 and LLMNR on 5355. Learn why, plus DNS attacks and how to encrypt lookups.