KagisoSec_

Services

Service Bank

Ports, fingerprints, file paths and the sensitive files worth looting, one card per service. Search inside any card with ⌘K.

134 services 121 sensitive files

Category

Active Directory / LDAP

:88:389:636:3268 #windows#active-directory
Open

AD Enumeration

:53:88:135:139 #windows#active-directory
Open

AD Lateral Movement

:135:139:445:3389 #windows#active-directory
Open

AD Trust Attacks

:88:389 #windows#active-directory
Open

ADCS

:443:445 #windows#active-directory
Open

Adobe ColdFusion

:8500:80 #web-app#java
Open

Amazon Redshift

:5439 #database#aws
Open

Android Debug Bridge (ADB)

:5555 #remote-access#android
Open

Ansible

:80 #ci-cd#automation
Open

Apache httpd

:80:443 #web-app#linux
Open

Apache NiFi

:8080:8443 #web-app#java
Open

Apache Tomcat

:8080:8443:8009 #web-app#java
Open

Apple Filing Protocol (AFP)

:548 #file-share#macos
Open

Asterisk AMI

:5038 #voip#asterisk
Open

BACnet (Building Automation)

:47808 #service#ics
Open

Bitcoin / Crypto Node

:8333:8332 #service#crypto
Open

BloodHound

:389:445:7474 #windows#active-directory
Open

Cacti

:80 #monitoring#web-app
Open

Cassandra

:9042:7199:9160 #database#nosql
Open

Check Point FireWall-1

:264:18264 #service#firewall
Open

Cisco Catalyst SD-WAN

:12346:443 #service#cisco
Open

Cisco Smart Install

:4786 #service#cisco
Open

CouchDB

:5984:6984 #database#nosql
Open

DACL / ACL Attacks

:389:445 #windows#active-directory
Open

distcc

:3632 #service#rce
Open

DNS / BIND

:53:53 #dns#linux
Open

Docker API

:2375:2376 #service#containers
Open

Docker Registry

:5000 #ci-cd#docker
Open

Drupal

:80:443 #web-app#php
Open

Echo

:7:7 #service#legacy
Open

Elasticsearch

:9200:9300 #database#search
Open

EPP

:700 #service#dns
Open

Erlang Port Mapper (epmd)

:4369:25672 #service#erlang
Open

EtherNet/IP (CIP)

:44818:2222 #service#ics
Open

Exchange / OWA Attacks

:25:80:443:587 #windows#active-directory
Open

fail2ban

#linux#privesc
Open

FastCGI / PHP-FPM

:9000 #service#php
Open

Finger

:79 #service#enumeration
Open

FreePBX

:80:443:5038:5060 #voip#asterisk
Open

FTP

:21 #file-share#ftp
Open

Gitea / Gogs

:3000 #ci-cd#git
Open

GitLab

:80:443:22 #ci-cd#ruby
Open

GlusterFS

:24007:49152 #file-share#storage
Open

Gophish

:3333:8080 #web-app#phishing
Open

Grafana

:3000 #monitoring#web-app
Open

Hadoop

:9870:8088:50075 #service#big-data
Open

HashiCorp Vault

:8200 #web-app#secrets
Open

Helm Tiller

:44134 #service#kubernetes
Open

HP/Compaq Insight Manager

:2301:2381 #monitoring#hp
Open

HSQLDB

:9001 #database#java
Open

IBM MQ

:1414 #service#message-queue
Open

Ident

:113 #service#enumeration
Open

IIS

:80:443 #web-app#windows
Open

IMAP / POP3

:110:143:993:995 #mail#imap
Open

incron

#linux#privesc
Open

InfluxDB

:8086 #database#time-series
Open

IPMI

:623 #ipmi#bmc
Open

IPsec / IKE VPN

:500:4500 #remote-access#vpn
Open

IRC

:6667:6697:194 #service#chat
Open

iSCSI

:3260 #file-share#storage
Open

Java RMI

:1099:1098 #service#java
Open

JBoss / GlassFish

:8080:8443:4848:9990 #web-app#java
Open

JDWP (Java Debug Wire Protocol)

:8000:8453 #service#java
Open

Jenkins

:8080:50000 #ci-cd#java
Open

Joomla

:80:443 #web-app#php
Open

Kerberos

:88 #windows#kerberos
Open

Kerberos Attacks

:88 #windows#active-directory
Open

Kibana

:5601 #monitoring#web-app
Open

Kubernetes

:6443:10250:2379 #service#containers
Open

LDAP

:389:636:3268:3269 #active-directory#windows
Open

Log4Shell (Log4j JNDI)

:0 #web-app#java
Open

Mattermost

:8065 #web-app#chat
Open

mDNS / DNS-SD

:5353 #dns#discovery
Open

Memcached

:11211:11211 #cache#store
Open

Modbus (ICS/SCADA)

:502 #service#ics
Open

MongoDB

:27017 #database#nosql
Open

MQTT

:1883:8883 #service#iot
Open

MSRPC / WMI

:135:49152 #windows#rpc
Open

MSSQL

:1433 #database#sql
Open

MSSQL in AD Environments

:1433:1434 #windows#active-directory
Open

MySQL / MariaDB

:3306 #database#sql
Open

NATS

:4222:8222:6222 #service#message-queue
Open

NDMP

:10000 #file-share#backup
Open

NetExec (nxc)

:445:389:5985:1433 #windows#active-directory
Open

Network Printers (JetDirect)

:9100:631:515 #service#printer
Open

NFS

:111:2049 #file-share#linux
Open

nginx

:80:443 #web-app#linux
Open

NSClient++

:8443:12489 #monitoring#windows
Open

NTLM Relay Attacks

:445:389:80 #windows#active-directory
Open

NTP

:123 #service#enumeration
Open

OMI (OMIGOD)

:5986:5985:1270 #remote-access#linux
Open

OPC UA

:4840 #service#ics
Open

Openfire (XMPP)

:9090:9091:5222:7070 #web-app#xmpp
Open

Oracle TNS

:1521 #database#oracle
Open

osTicket

:80:443 #web-app#php
Open

PaperCut NG/MF

:9191:9192 #web-app#printing
Open

Portmapper / rpcbind

:111:111 #service#rpc
Open

Postfix / SMTP

:25:465:587 #mail#smtp
Open

PostgreSQL

:5432 #database#sql
Open

PowerView / SharpView

:389 #windows#active-directory
Open

PPPP P2P Cameras

:32100 #service#iot
Open

PPTP VPN

:1723 #remote-access#vpn
Open

PRTG Network Monitor

:80:443 #monitoring#windows
Open

R-Services

:512:513:514 #remote-access#linux
Open

RabbitMQ / AMQP

:5672:15672:25672 #service#message-queue
Open

RDP

:3389 #remote-access#windows
Open

Redis

:6379 #cache#nosql
Open

Roundcube Webmail

:80:443 #mail#webmail
Open

rsync

:873 #file-share#linux
Open

RTSP (Streaming / Cameras)

:554:8554 #service#camera
Open

Rusersd

:1026 #service#rpc
Open

SAP

:3299:3200:3600:8000 #web-app#erp
Open

SCCM / MECM Attacks

:80:443:8005:10123 #windows#active-directory
Open

SIP / VoIP

:5060:5061 #voip#sip
Open

SMB

:139:445 #windows#smb
Open

SMTP

:25:465:587 #mail#smtp
Open

SNMP

:161:162 #service#snmp
Open

Splunk

:8000:8089:9997 #monitoring#python
Open

Squid Proxy

:3128:8080 #service#proxy
Open

SSH

:22 #remote-access#linux
Open

Subversion (SVN)

:3690:80 #ci-cd#version-control
Open

TACACS+

:49 #service#cisco
Open

Telnet

:23 #remote-access#cleartext
Open

TFTP

:69 #file-share#udp
Open

Umbraco CMS

:80:443 #web-app#cms
Open

VNC

:5900:5901:5800 #remote-access#windows
Open

Webmin

:10000:20000 #web-app#perl
Open

Werkzeug / Flask Debug Console

:5000:80 #web-app#python
Open

WHOIS

:43 #service#recon
Open

Windows AV / EDR Evasion

#windows#active-directory
Open

WinRM

:5985:5986 #remote-access#windows
Open

WordPress

:80:443 #web-app#php
Open

WS-Discovery

:3702 #service#discovery
Open

X11

:6000 #remote-access#x11
Open