Port

22 - SSH

• Wikipedia: https://en.wikipedia.org/wiki/Secure_Shell

• Potential Risks

  • Brute Force

389, 636 - LDAP

• Wikipedia: https://en.wikipedia.org/wiki/Lightweight_Directory_Access_Protocol

• Potential Risks

  • Unauthenticated Access

• Exploitation

  • Information Disclosure

873 - Rsync

• Wikipedia: https://en.wikipedia.org/wiki/Rsync

• Potential Risks

  • Unauthorized Access

• Exploitation

  • Upload File

    • Method 1: Regular upload files

    • Method 2: Upload crontab to Get Shell

    • Method 3: Upload the executable file and add crontab to execute

  • Download File

1433 - MSSQL

• Wikipedia: https://en.wikipedia.org/wiki/Microsoft_SQL_Server

• Exploitation

  • CLI Command Execution

1883 - MQTT

• Wikipedia: https://en.wikipedia.org/wiki/MQTT

• Potential Risks

  • Unauthenticated Access

  • Brute Force

• Exploitation

  • Information Disclosure

2375 - Docker

• Wikipedia: https://en.wikipedia.org/wiki/Docker

• Potential Risks

  • API Unauthenticated Access

• Exploitation

  • Container Escape

2379 - etcd

• Wikipedia: https://zh.wikipedia.org/wiki/Kubernetes#etcd

• Potential Risks

  • Unauthenticated Access

• Exploitation

  • Information Disclosure

3306 - MySQL

• Wikipedia: https://en.wikipedia.org/wiki/MySQL

• Exploitation

  • MySQL Command Line Interface

    • CLI Write File

    • CLI Load File

    • CLI Command Execution

  • MySQL SQL Injection

    • sqlmap Write File

    • sqlmap Get Shell

6379 - Redis

• Wikipedia: https://en.wikipedia.org/wiki/Redis

• Potential Risks

  • Unauthenticated Access

• Exploitation

  • Write File

  • GUI Tools

8086 - InfluxDB

• Wikipedia: https://en.wikipedia.org/wiki/InfluxDB

• Potential Risks

  • Unauthorized Access

  • CVE-2019-20933 (Unauthorized Access)

• Exploitation

  • Information Disclosure

27017 - MongoDB

• Wikipedia: https://en.wikipedia.org/wiki/MongoDB

• Potential Risks

  • Unauthenticated Access

• Exploitation

  • Information Disclosure

OverView

Default Port / Server	RCE
2379 - etcd