| 名称 |
TCP RPC Scan |
|
|
| 摘要 |
An adversary scans for RPC services listing on a Unix/Linux host. |
| 前置条件 |
RPC scanning requires no special privileges when it is performed via a native system utility. |
| 执行流程 |
| 步骤 |
阶段 |
描述 |
技术手法 |
| 1 |
Experiment |
An adversary sends RCP packets to target ports. |
|
| 2 |
Experiment |
An adversary uses the response from the target to determine which, if any, RPC service is running on that port. Responses will vary based on which RPC service is running. |
|
|
| 解决方案 | Typically, an IDS/IPS system is very effective against this type of attack. |
| 关联弱点 |
|
CWE 编号
|
描述
|
| CWE-200 |
Exposure of Sensitive Information to an Unauthorized Actor |
|
| 关联 CAPEC |
|
CAPEC 编号
|
描述
|
| CAPEC-300 |
An adversary uses a combination of techniques to determine the state of the ports on a remote target. Any service or application available for TCP or UDP networking will have a port open for communications over the network. |
|