Analisis Forense

Fase 2: Escaneo

Alumno: Pedro Chacón M.

Sección: 2101 PEV

Ramo: Seguridad en Sistemas Operativos

Profesor: Alexis Carrasco Espinoza

1. Objetivo:

Recopilar la mayor cantidad de información del host de la empresa Margarita uauy e hijos ltda. Esta información será procesada para generar un informa de seguridad y sus corrección.

a.- Escaneo de puertos:

190.151.35.58(online)

Address

• 190.151.35.58 - (ipv4)

Ports

The 980 ports scanned but not shown below are in state: closed

Port State (toggle closed [0] | filtered [3])

Service Reason Product Version Extra info

80 tcp Open http syn-ack Microsoft IIS httpd 7.5

135 tcp filtered msrpc no-response

139 tcp filtered netbios-ssn no-response

445 tcp filtered microsoft-ds no-response

1433 tcp Open ms-sql-s syn-ack Microsoft SQL Server 2008 10.00.5512.00; SP3+

2099 tcp Open h2250-annex-g syn-ack

2301 tcp Open hadoop-tasktracker syn-ack Apache Hadoop 9.9 HP System Management 3.0.2.77; httpd 2.2.6+

2381 tcp Open http syn-ack Apache httpd SSL-only mode

3389 tcp Open ms-wbt-server syn-ack Microsoft Terminal Service

5800 tcp Open vnc-http syn-ack TightVNC User produccion; VNC TCP port: 5900

5900 tcp Open vnc syn-ack VNC protocol 3.8

8009 tcp Open ajp13 syn-ack Apache Jserv Protocol v1.3

8080 tcp Open http-proxy syn-ack

8081 tcp Open tcpwrapped syn-ack

8443 tcp Open https-alt syn-ack

30000 tcp Open unknown syn-ack

49152 tcp Open msrpc syn-ack Microsoft Windows RPC

49153 tcp Open msrpc syn-ack Microsoft Windows RPC

49154 tcp Open msrpc syn-ack Microsoft Windows RPC

49155 tcp Open msrpc syn-ack Microsoft Windows RPC

Remote Operating System Detection

• Used port: 80/tcp (open)

• Used port: 1/tcp (closed)

• Used port: 30218/udp (closed)

• OS match: Microsoft Windows Server 2008 R2 or Windows 8 (96%)

• OS match: Microsoft Windows Server 2008 SP1 or Windows 8 (96%)

• OS match: Microsoft Windows Server 2008 R2 (95%)

• OS match: Microsoft Windows 7 SP1 (90%)

• OS match: Microsoft Windows 7 SP1 or Windows Server 2008 SP1 - SP2 (89%)

• OS match: Microsoft Windows 7 (89%)

• OS match: Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (89%)

• OS match: Microsoft Windows Vista SP2 (89%)

• OS match: Microsoft Windows Vista SP2, Windows 7 SP1, or Windows Server 2008 (89%)

• OS match: Microsoft Windows Server 2008 SP1 (89%)

B.- Conclusión:

El

...