Book Image

Practical Network Scanning

By : Ajay Singh Chauhan
Book Image

Practical Network Scanning

By: Ajay Singh Chauhan

Overview of this book

Network scanning is the process of assessing a network to identify an active host network; same methods can be used by an attacker or network administrator for security assessment. This procedure plays a vital role in risk assessment programs or while preparing a security plan for your organization. Practical Network Scanning starts with the concept of network scanning and how organizations can benefit from it. Then, going forward, we delve into the different scanning steps, such as service detection, firewall detection, TCP/IP port detection, and OS detection. We also implement these concepts using a few of the most prominent tools on the market, such as Nessus and Nmap. In the concluding chapters, we prepare a complete vulnerability assessment plan for your organization. By the end of this book, you will have hands-on experience in performing network scanning using different tools and in choosing the best tools for your system.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Contributors
Preface
Index

Hardening server security


Most of us assume that systems or servers are already secure, and this might be a false assumption. Imagine if any system server, firewall or router is stolen without first being hardened. An attacker would probably first try to crack a targeted system with a default username and password. For a Linux based machine, my default username would be root, the password would be root, and most of us would continue to use it. Server hardening involves identifying and re-mediating security vulnerabilities. We will discuss server hardening and the best practices you can implement immediately in order to reduce the risk of attackers compromising your business's critical systems and data.

Check for open ports or services

Identifying open ports on servers requires the port to be opened and unnecessary services to be disabled or shutdown. The server should have a minimal operating system configuration.

For Windows, run the following command using the Command Prompt:

netstat -a |...