Hardware
Firewall, Router, Switch, UPS, NIC, HSM, TPM.
Software
SIEM, IDS/IPS, Virtual Machines, Packet Capture (Wireshark/tcpdump).
Protocol Analyzers
Wireshark (GUI), tcpdump (CLI).
Linux Distros
Kali Linux (Pen Testing), Ubuntu (User-friendly).
HSM (Hardware Security Module)
A physical computing device that safeguards and manages digital keys for strong authentication and provides cryptoprocessing.
TPM (Trusted Platform Module)
A secure cryptoprocessor (chip) designed to secure hardware by integrating cryptographic keys into devices.
NFC (Near Field Communication)
A set of communication protocols for communication between two electronic devices over a distance of 4 cm or less (used in badges/payments).
RFID (Radio Frequency Identification)
Uses electromagnetic fields to automatically identify and track tags attached to objects.
Access Point (AP)
A networking hardware device that allows other Wi-Fi devices to connect to a wired network.
Port Drill: What port is SSH (Secure Shell)?
22
kind of looks like S S backwards
Port Drill: What port is Telnet?
23 (Note: Telnet is unencrypted and rarely used now).
23 was Michael Jordan’s number and he’s retired too
Port Drill: What port is DNS?
53
What’s her name was 53 when we worked at the flower shop. Sharon!
Port Drill: What port is SMTP?
25
Sending Mail To People used to cost a quarter $.25
Port Drill: What ports are used by FTP?
20 (Data) and 21 (Control).
“OG” FTP uses 2 ports to manage files (20 Data, 21 Control) SFTP one: 22
Port Drill: What port is HTTPS?
443
“4-4-3 is safer for me”
Port Drill: What port is RDP (Remote Desktop)?
3389
big, ugly number for a big, graphical protocol (Remote Desktop)
Port Drill: What port is IMAP?
143
Mailman. I Miss a Person and so I send I (1) Love (4) You (3).
Port Drill: What port is POP3?
110
Postman always rings twice and puts the letter through the hole
Port Drill: What port is LDAP?
389
Lightweight Directory ; LDAPS is 636
Port Drill: What port is SQL Server (default)?
Microsoft
1433
“One-Four-Three-Three … SQL for me” Microsoft
Scenario: You see traffic on port 80 leaving a server that contains sensitive data. Why is this a problem?
Port 80 is HTTP (unencrypted), meaning the sensitive data is being sent in cleartext and can be intercepted.
80 is the “standard” speed limit - standard web
MySQL: which Port?
Port 3306 is the industry standard default.