So now let's talk about poison protocols, so when data is transmitted over, a network is essentially
done over what is called port, you can think of ports as separate communication channels that hold
specific purposes.
So each port is going to do a different thing and you're going to use a specific port based on what
you're trying to do.
So just for example, like if you browse in the web, typically that traffic is set over Port 80 or
Port 443 because those are meant for web browsing.
And in total, you don't need to know all of them.
You only need a handful.
But in fact, it's on.
If you want to impress anybody, tell them, hey, did you know that there are sixty five thousand five
hundred thirty five possible ports?
As an ethical hacker?
There's some ports that you need to know or at least be aware of because these are going to be ports
that you might find during an assessment and be able to take advantage of or just it's going to help
you understand, you know, what a specific server computer is doing.
All right.
So I'm going to go over some of the top ports and protocols that you need to know.
So these are typically going to be called like common ports because they're frequently used and they
have specific reasons why they use and is going to be very helpful, like I say, if you don't understand.
And so you should probably attempt over to, you know, to commit these ports and protocols to memory
or Alisha's however.
And also we're seeing it very quickly.
It's going to help you in the real world.
Don't worry.
There's plenty of people at desks don't feel bad about this because the plain people at their desk,
they have, you know, different kinds of like cheat sheets posted on the wall just so that they know
because not everybody wants to take time to memorize it.
But it will help you to memorize the book.
So first up is going to be Port 20 and 21, which is the file transfer protocol.
We're going to keep all of these at a very high level, just as you understand, because all you really
need to know.
So file transfer protocol are FTP is simply what it says is for transferring files.
This is very important understanding of what that point is if you see it open, because might be something
that you can exploit or use when you're doing penetration.
So what to do is call a secure show.
Now, this is a protocol that superseded the next one, which is twenty three.
Tonet So both of these are pretty much methods of remote login.
So the problem with telling that was that it was unencrypted.
So if someone were to listen in on traffic over twenty three, everything was in plain text.
So you can get usernames, passwords, all kinds of sensitive information.
So important to secure a show was created to be used as an encrypted form of remote access to systems.
So if anything is intercepted over twenty two, then you know it can't be read in plain text.
It's not something that can be decrypted very easily, easily either.
So it's very important to know you should choose point twenty two point twenty three if you unfortunately
three of your computer closet.
All right.
So next is 25.
This is the simple mail transport protocol, also known as SNP.
And this is the port that, you know, mail is typically sent over.
Next, we have Port 53, which is a domain name server DNS.
And this pretty much allows us to map IP addresses.
The host names like, for example, Google dot com has a specific IP address, but we might not know
that IP address by heart.
So we type in Google dot com and then DNS is used to figure out the exact IP address for us and takes
us to this site.
So this is a high level how, you know, DNS typically works.
Then we have four eighty, which is hypertext transfer protocol, a.k.a. HTTP s just Web traffic and
we have one 10, which is going to be the post office protocol three or pop three, as you might have
seen him before, is a lot of people calling.
This is simply just a port that's used to receive email.
So I like to think of it the way I remember it says pop, pop, pop email came in or something like
that, like email just pops in or something.
That's good.
That's how I remember it.
You have to remember that way.
That's a good way to remember it.
The next one is part one, two, three, and that's the network time protocol, a.k.a. NNTP.
And this is just the port that's used to synchronize time, synchronize clocks across, you know, devices
on a network.
So a lot of devices that connect to another device and synchronize the time with that device via this
port and this protocol.
So Port one thirty nine is server message block and pretty much each one of those is SMB.
And this is kind of like file transfer, pretty much for sidedly for windows, but it's also for other
systems as well.
But you're going to see a lot of.
Those it's pretty much when you're allowed to map to different drives like you have to map to another
computer network and actually go browse the directories from your computer using SMB to do that.
For one, sixty one is the simple network military protocol, a.k.a. as an MP, and this is pretty much
how a network device is kind of communicating back and forth statis messages and such.
You don't really need to know.
You know, you're not going to be taking in too much of that.
But it could be very helpful, as you'll see later on, for justice, for gathering information.
OK, part three.
Eighty nine is the lightweight directory Access Protocol, or Alhadeff.
And this is pretty much the port that is used with Active Directory for Windows.
So it could be useful on a penetration.
So this is good to know, you know, what that port does because of something that we could use in the
future and take advantage of because we definitely could potentially use lightweight directory access
protocol to our advantage.
Next is Port four for three, and this is just Hypertext Transfer Protocol SIGIR.
So this is typically what we're using.
We're on the Web.
We're using a encrypted session so people can steal our information.
We log into our bank accounts online.
We're probably doing that over four, four, four, three.
And this is securing communications and port for four or five is another port for server.
Message block is just kind of like in a different format.
We'll understand that a little bit later.
Just know that's for four or five and one three nine, both our server message block and then we have
Port three three eight nine, which is remote desktop protocol.
And this is how we remotely login to our computers.
You can set up for thirty three, eighty nine on your computer and be able to remote into it from another
computer on the network over this port.
So let's just use for kind of remote management and it was left open.
The system could be vulnerable to a potential attack.
You have to gather the right information to be able to attack it.
So now let's go into a little bit about, you know, TCP and UDP.
So when using ports, it's important to know that each port exists on both TCP and UDP.
So there's a TCP, you know, 80 and UDP, you know, there's TCP UDP for both.
So Tsipi is what is known as a connection oriented protocol, and that's built around, you know, confirming
package delivery.
So when packages are sent, every delivery is confirmed.
And if his and his recent deliveries ever, you know, seen to fail.
And so that makes it a little bit slow and EDP, but it's more reliable.
Now, UDP is known as a connection with this protocol, meaning that, you know, it doesn't check for
failed transmission of packets, you know, as a result is faster, but you might lose some information
or packets along the way.
So the purpose for the purpose of this cause just know that both exist because some specific protocols
or some specific ports might be available only on the TCP.
You don't need to know, you know, down in the trenches exactly what each one is.
Just understand at a high level that they both exist and that you need to be aware of both of them.
OK.