Port Based Checks
What to check based on port and Service running
DNS
DNS Server Cache Snooping Remote Information Disclosure
DNS Server Dynamic Update Record Injection
DNS Server Recursive Query Cache Poisoning Weakness
DNS Server Spoofed Request Amplification DDoS
NTP
Network Time Protocol (NTP) Mode 6 Amplification Attack
IKE
Internet Key Exchange (IKE) Aggressive Mode With Pre-Shared Key
IPMI
IPMI v2.0 Password Hash Disclosure
SMB
Weak SMB Configuration
SMBv1 Enabled
Unauthenticated Shares Access
NULL Session Authentication
SMB Signing Not Required
SID Enumeration
User Enumeration
RDP
Weak RDP Configuration
SNMP
Weak SNMP Configuration
default community name "public"
FTP
SSH
SSH Crypto issues
password based authentication
Last updated