DocLarge
Premium
join:2004-09-08
| reply to Link Logger
A "closed" port will attract more interest than "stealthed" in my opinion...
Simply put, if the port is stealthed (provided some jackhole isn't using some "George Jetson," Mystery Science Theater 3000 type device) then the port shouldn't even register to a scan/probe.
If the port is just simply closed, thise means it will respond (to an extent) to the probe, but still won't let you in. Now, a persistent hacker will take this as a challenge because now he knows the port is there; the goal would then would be to get in "even though" the port is closed. Think about, there are a lot of stealthed ports on a router by default if configured out of the box properly. If I were a hacker, why would I spend my time looking for ports that are stealthed when I can try and find a closed one to hack and then work my way through the infrastructure that way?
Jay |
