渗透测试学习 二、Windows基础

系统目录  服务  端口  注册表  黑客常用DOS命令（在拿到shell时会用到）

一、  系统目录

Windows目录  系统的安装目录

System32àconfigàSAM文件  是用户密码的存储文件

System32àetcàhost文件  记录本地解析（优先级大于DNS域名解析）可以自行添加域名解析记录

System32àcmdexe

用户目录  用户家目录，存放缓存文件、桌面文件

Program file  64位软件安装路径

Program file（X86）  32位软件安装路径

Programdata  软件的临时配置文件（lpk.dll文件à病毒）

　　Perflogs是win7的日志信息文件，存储的是如磁盘扫描错误信息，可以删除，但是会降低系统的速度，该文件是系统自动生成的。

二、  服务

大致分为两类：

　　本机：（软件）

　　网络：web应用程序

　　Win+R，输入service.msc可以打开

　　服务是一种应用程序类型，在后台运行，服务应用程序通常可以在本地和通过网络为用户提供一些功能。例如：客户端/服务器端应用程序、web服务器、数据库服务器等。

常见服务：

　　Web服务、dns服务、dhcp服务、邮件服务、telnet服务、ssh服务、ftp服务、smb服务

三、  端口

作用  分类  常见端口  黑客可以用来干什么？

作用：

　　IP是用来区分主机来通信的，而端口就是用来区分服务的，与服务紧密相连。并且端口并不是一一对应的，比如http服务是80端口，我们本机可以用7300端口与之通信；端口不能重复使用，我们也常常会碰到端口占用的情况，这就是遵循了，端口不可以重复使用的原则。

分类：

　　知名端口：即众所周知的端口，范围在0~1023，一般会将这些端口与一些服务默认国定在一起，比如21àftp，25àmstp，80àhttp等。

　　动态端口：范围是在1024~65535，这些端口一般不会与一些服务固定在一起。在这个区段的端口常常会被病毒、木马利用，比如：冰河à7626，WAY 2.4à8011，Netspy 3.0à7306，YAIà1024等。注意，在搭建网站的时候，尽量使用800以上的端口。

一个问题，防火墙可以防止和杀除病毒吗？

答：不可以，防火墙可以限制回连，限制端口，限制流量，但无法杀除病毒木马。

（以下解释源自网络）

1.公认端口（Well Known Ports）：从0到1023，它们紧密绑定于一些服务。通常这些端口的通讯明确表明了某种服务的协议。例如：80端口实际上总是HTTP通讯。
2. 注册端口（Registered Ports）：从1024到49151。它们松散地绑定于一些服务。也就是说有许多服务绑定于这些端口，这些端口同样用于许多其它目的。例如：许多系统处理动态端口从1024左右开始。
3. 动态和/或私有端口（Dynamic and/or Private Ports）：从49152到65535。理论上，不应为服务分配这些端口。实际上，机器通常从1024起分配动态端口。但也有例外：SUN的RPC端口从32768开始。

常见端口：

HTTP  80/8080/3128/8081/9080

FTP  21

Telnet  23

TFTP  69/udp

SSH、scp  端口重定向  22/tcp

SMTP  25/tcp

POP3  110/tcp

TOMCAT  8080

WIN2003数据库  3389

Oracle数据库  1521

MySQL SQLServer  1433/tcp  1433/udp

QQ  1080/udp

MySQL  3306

以下基本涵盖了所有的端口：

 　tcpmux　TCP Port Service Multiplexer 传输控制协议端口服务多路开关选择器
 　compressnet　Management Utility　　　　 compressnet 管理实用程序
 　compressnet　Compression Process　　　　压缩进程
 　rje　Remote Job Entry　　　　　　　　　 远程作业登录
 　echo　Echo　　　　　　　　　　　　　　　回显
 　discard　Discard　　　　　　　　　　　　丢弃
 　systat　Active Users　　　　　　　　　 在线用户
 　daytime　Daytime　　　　　　　　　　　 时间
 　qotd　Quote of the Day　　　　　　　　 每日引用
 　msp　Message Send Protocol　　　　　　 消息发送协议
 　chargen　Character Generator　　　　　 字符发生器
 　ftp-data　File Transfer [Default Data]　文件传输协议(默认数据口)　
 　ftp　File Transfer [Control]　　　　　　文件传输协议(控制)
 　ssh　SSH Remote Login Protocol　　　　 SSH远程登录协议
 　telnet　Telnet　　　　　　　　　　　　 终端仿真协议
 　?　any private mail system　　　　　　 预留给个人用邮件系统
 　smtp　Simple Mail Transfer　　　　　　 简单邮件发送协议
 　nsw-fe　NSW User System FE　　　　　　 NSW 用户系统现场工程师
 　msg-icp　MSG ICP　　　　　　　　　　　 MSG　ICP
 　msg-auth　MSG Authentication　　　　　 MSG验证
 　dsp　Display Support Protocol　　　　　显示支持协议
 　?　any private printer server　　　　　预留给个人打印机服务
 　time　Time　　　　　　　　　　　　　　 时间
 　rap　Route Access Protocol　　　　　　 路由访问协议
 　rlp　Resource Location Protocol　　　　资源定位协议
 　graphics　Graphics　　　　　　　　　　 图形
 　nameserver　WINS Host Name Server　　　WINS 主机名服务
 　nicname　Who Is　　　　　　　　　　　　"绰号" who is服务
 　mpm-flags　MPM FLAGS Protocol　　　　　MPM(消息处理模块)标志协议
 　mpm　Message Processing Module [recv]　消息处理模块　
 　mpm-snd　MPM [default send]　　　　　　消息处理模块(默认发送口)
 　ni-ftp　NI FTP　　　　　　　　　　　　 NI FTP
 　auditd　Digital Audit Daemon　　　　　 数码音频后台服务　
 　tacacs　Login Host Protocol (TACACS)　 TACACS登录主机协议
 　re-mail-ck　Remote Mail Checking Protocol　远程邮件检查协议
 　la-maint　IMP Logical Address Maintenance　IMP(接口信息处理机)逻辑地址维护
 　xns-time　XNS Time Protocol　　　　　　施乐网络服务系统时间协议　　
 　domain　Domain Name Server　　　　　　 域名服务器
 　xns-ch　XNS Clearinghouse　　　　　　　施乐网络服务系统票据交换
 　isi-gl　ISI Graphics Language　　　　　ISI图形语言
 　xns-auth　XNS Authentication　　　　　 施乐网络服务系统验证
 　?　any private terminal access　　　　 预留个人用终端访问
 　xns-mail　XNS Mail　　　　　　　　　　 施乐网络服务系统邮件
 　?　any private file service　　　　　　预留个人文件服务
 　?　Unassigned　　　　　　　　　　　　　未定义
 　ni-mail　NI MAIL　　　　　　　　　　　 NI邮件?
 　acas　ACA Services　　　　　　　　　　 异步通讯适配器服务
 　whois+ whois+　　　　　　　　　　　　　 WHOIS+
 　covia　Communications Integrator (CI)　通讯接口　
 　tacacs-ds　TACACS-Database Service　　 TACACS数据库服务
 　sql*net　Oracle SQL*NET　　　　　　　　Oracle SQL*NET
 　bootps　Bootstrap Protocol Server　　　引导程序协议服务端
 　bootpc　Bootstrap Protocol Client　　　引导程序协议客户端
 　tftp　Trivial File Transfer　　　　　　小型文件传输协议
 　gopher　Gopher　　　　　　　　　　　　 信息检索协议
 　netrjs-　Remote Job Service　　　　　 远程作业服务
 　netrjs-　Remote Job Service　　　　　 远程作业服务
 　netrjs-　Remote Job Service　　　　　 远程作业服务
 　netrjs-　Remote Job Service　　　　　 远程作业服务
 　?　any private dial out service　　　　预留给个人拨出服务
 　deos　Distributed External Object Store 分布式外部对象存储　
 　?　any private RJE service　　　　　　预留给个人远程作业输入服务
 　vettcp　vettcp　　　　　　　　　　　　 修正TCP?
 　finger　Finger　　　　　　　　　　　　 FINGER(查询远程主机在线用户等信息)
 　http　World Wide Web HTTP　　　　　　　全球信息网超文本传输协议
 　hosts2-ns　HOSTS2 Name Server　　　　　HOST2名称服务
 　xfer　XFER Utility　　　　　　　　　　 传输实用程序
 　mit-ml-dev　MIT ML Device　　　　　　　模块化智能终端ML设备
 　ctf　Common Trace Facility　　　　　　 公用追踪设备
 　mit-ml-dev　MIT ML Device　　　　　　　模块化智能终端ML设备
 　mfcobol　Micro Focus Cobol　　　　　　 Micro Focus Cobol编程语言
 　?　any private terminal link　　　　　 预留给个人终端连接
 　kerberos　Kerberos　　　　　　　　　　 Kerberros安全认证系统
 　su-mit-tg　SU/MIT Telnet Gateway　　　 SU/MIT终端仿真网关
 　dnsix　DNSIX Securit Attribute Token Map　DNSIX 安全属性标记图　
 　mit-dov　MIT Dover Spooler　　　　　　 MIT Dover假脱机
 　npp　Network Printing Protocol　　　　 网络打印协议
 　dcp　Device Control Protocol　　　　　 设备控制协议
 　objcall　Tivoli Object Dispatcher　　　Tivoli对象调度
 　supdup　SUPDUP　　　　　　　　　　　　
 　dixie　DIXIE Protocol Specification　　DIXIE协议规范
 　swift-rvf　Swift Remote Virtural File Protocol　快速远程虚拟文件协议　
 　tacnews　TAC News　　　　　　　　　　　TAC(东京大学自动计算机?)新闻协议
 　metagram　Metagram Relay　　　　　　　
 /tcp hostname NIC Host Name Server
 /tcp iso-tsap ISO-TSAP Class
 /tcp gppitnp Genesis Point-to-Point Trans Net
 /tcp acr-nema ACR-NEMA Digital Imag. & Comm.
 /tcp cso CCSO name server protocol
 /tcp csnet-ns Mailbox Name Nameserver
 /tcp 3com-tsmux 3COM-TSMUX
 /tcp rtelnet Remote Telnet Service
 /tcp snagas SNA Gateway Access Server
 /tcp pop2 Post Office Protocol - Version
 /tcp pop3 Post Office Protocol - Version
 /tcp sunrpc SUN Remote Procedure Call
 /tcp mcidas McIDAS Data Transmission Protocol
 /tcp ident
 /tcp audionews Audio News Multicast
 /tcp sftp Simple File Transfer Protocol
 /tcp ansanotify ANSA REX Notify
 /tcp uucp-path UUCP Path Service
 /tcp sqlserv SQL Services
 /tcp nntp Network News Transfer Protocol
 /tcp cfdptkt CFDPTKT
 /tcp erpc Encore Expedited Remote Pro.Call
 /tcp smakynet SMAKYNET
 /tcp ntp Network Time Protocol
 /tcp ansatrader ANSA REX Trader
 /tcp locus-map Locus PC-Interface Net Map Ser
 /tcp unitary Unisys Unitary Login
 /tcp locus-con Locus PC-Interface Conn Server
 /tcp gss-xlicen GSS X License Verification
 /tcp pwdgen Password Generator Protocol
 /tcp cisco-fna cisco FNATIVE
 /tcp cisco-tna cisco TNATIVE
 /tcp cisco-sys cisco SYSMAINT
 /tcp statsrv Statistics Service
 /tcp ingres-net INGRES-NET Service
 /tcp epmap DCE endpoint resolution
 /tcp profile PROFILE Naming System
 /tcp netbios-ns NETBIOS Name Service
 /tcp netbios-dgm NETBIOS Datagram Service
 /tcp netbios-ssn NETBIOS Session Service
 /tcp emfis-data EMFIS Data Service
 /tcp emfis-cntl EMFIS Control Service
 /tcp bl-idm Britton-Lee IDM
 /tcp imap Internet Message Access Protocol
 /tcp uma Universal Management Architecture
 /tcp uaac UAAC Protocol
 /tcp iso-tp0 ISO-IP0
 /tcp iso-ip ISO-IP
 /tcp jargon Jargon
 /tcp aed- AED  Emulation Service
 /tcp sql-net SQL-NET
 /tcp hems HEMS
 /tcp bftp Background File Transfer Program
 /tcp sgmp SGMP
 /tcp netsc-prod NETSC
 /tcp netsc-dev NETSC
 /tcp sqlsrv SQL Service
 /tcp knet-cmp KNET/VM Command/Message Protocol
 /tcp pcmail-srv PCMail Server
 /tcp nss-routing NSS-Routing
 /tcp sgmp-traps SGMP-TRAPS
 /tcp snmp SNMP
 /tcp snmptrap SNMPTRAP
 /tcp cmip-man CMIP/TCP Manager
 /tcp cmip-agent CMIP/TCP Agent
 /tcp xns-courier Xerox
 /tcp s-net Sirius Systems
 /tcp namp NAMP
 /tcp rsvd RSVD
 /tcp send SEND
 /tcp print-srv Network PostScript
 /tcp multiplex Network Innovations Multiplex
 /tcp cl/ Network Innovations CL/
 /tcp xyplex-mux Xyplex
 /tcp mailq MAILQ
 /tcp vmnet VMNET
 /tcp genrad-mux GENRAD-MUX
 /tcp xdmcp X Display Manager Control Protocol
 /tcp nextstep NextStep Window Server
 /tcp bgp Border Gateway Protocol
 /tcp ris Intergraph
 /tcp unify Unify
 /tcp audit Unisys Audit SITP
 /tcp ocbinder OCBinder
 /tcp ocserver OCServer
 /tcp remote-kis Remote-KIS
 /tcp kis KIS Protocol
 /tcp aci Application Communication Interface
 /tcp mumps Plus Five‘s MUMPS
 /tcp qft Queued File Transport
 /tcp gacp Gateway Access Control Protocol
 /tcp prospero Prospero Directory Service
 /tcp osu-nms OSU Network Monitoring System
 /tcp srmp Spider Remote Monitoring Protocol
 /tcp irc Internet Relay Chat Protocol
 /tcp dn6-nlm-aud DNSIX Network Level Module Audit
 /tcp dn6-smm-red DNSIX Session Mgt Module Audit Redir
 /tcp dls Directory Location Service
 /tcp dls-mon Directory Location Service Monitor
 /tcp smux SMUX
 /tcp src IBM System Resource Controller
 /tcp at-rtmp AppleTalk Routing Maintenance
 /tcp at-nbp AppleTalk Name Binding
 /tcp at- AppleTalk Unused
 /tcp at-echo AppleTalk Echo
 /tcp at- AppleTalk Unused
 /tcp at-zis AppleTalk Zone Information
 /tcp at- AppleTalk Unused
 /tcp at- AppleTalk Unused
 /tcp qmtp The Quick Mail Transfer Protocol
 /tcp z39. ANSI Z39.
 /tcp 914c/g Texas Instruments 914C/G Terminal
 /tcp anet ATEXSSTR
 /tcp vmpwscs VM PWSCS
 /tcp softpc Insignia Solutions
 /tcp CAIlic Computer Associates Int‘l License Server
 /tcp dbase dBASE Unix
 /tcp mpp Netix Message Posting Protocol
 /tcp uarps Unisys ARPs
 /tcp imap3 Interactive Mail Access Protocol v3
 /tcp fln-spx Berkeley rlogind with SPX auth
 /tcp rsh-spx Berkeley rshd with SPX auth
 /tcp cdc Certificate Distribution Center
 /tcp direct Direct
 /tcp sur-meas Survey Measurement
 /tcp dayna Dayna
 /tcp link LINK
 /tcp dsp3270 Display Systems Protocol
 /tcp subntbcst_tftp SUBNTBCST_TFTP
 /tcp bhfhs bhfhs
 /tcp rap RAP
 /tcp set Secure Electronic Transaction
 /tcp yak-chat Yak Winsock Personal Chat
 /tcp esro-gen Efficient Short Remote Operations
 /tcp openport Openport
 /tcp hdap HDAP
 /tcp bgmp BGMP
 /tcp http-mgmt http-mgmt
 /tcp entrusttime EntrustTime
 /tcp bhmds bhmds
 /tcp vslmp VSLMP
 /tcp dpsi DPSI
 /tcp decauth decAuth
 /tcp zannet Zannet
 /tcp pip PIP
 /tcp pdap Prospero Data Access Protocol
 /tcp pawserv Perf Analysis Workbench
 /tcp zserv Zebra server
 /tcp fatserv Fatmen Server
 /tcp csi-sgwp Cabletron Management Protocol
 /tcp mftp mftp
 /tcp matip-type-b MATIP Type B
 /tcp bhoetty bhoetty (added //)
 /tcp ndsauth NDSAUTH
 /tcp bh611 bh611
 /tcp bhevent bhevent
 /tcp srssend SRS Send
 /tcp dtk DTK
 /tcp odmr ODMR
 /tcp qbikgdp QbikGDP
 /tcp clearcase Clearcase
 /tcp ulistproc ListProcessor
 /tcp legent- Legent Corporation
 /tcp legent-
 /tcp legent- Legent Corporation
 /tcp hassle Hassle
 /tcp nip Amiga Envoy Network Inquiry Proto
 /tcp tnETOS NEC Corporation
 /tcp dsETOS NEC Corporation
 /tcp is99c TIA/EIA/IS- modem client
 /tcp is99s TIA/EIA/IS- modem server
 /tcp hp-collector hp performance data collector
 /tcp hp-alarm-mgr hp performance data alarm manager
 /tcp arns A Remote Network Server System
 /tcp ibm-app IBM Application
 /tcp asa ASA Message Router Object Def.
 /tcp aurp Appletalk Update-Based Routing Pro.
 /tcp unidata-ldm Unidata LDM Version
 /tcp ldap Lightweight Directory Access Protocol
 /tcp uis UIS
 /tcp synotics-relay SynOptics SNMP Relay Port
 /tcp dis Data Interpretation System
 /tcp embl-ndt EMBL Nucleic Data Transfer
 /tcp netcp NETscout Control Protocol
 /tcp netware-ip Novell Netware over IP
 /tcp mptn Multi Protocol Trans. Net.
 /tcp kryptolan Kryptolan
 /tcp iso-tsap-c2 ISO Transport Class  Non-Control over TCP
 /tcp work-sol Workstation Solutions
 /tcp ups Uninterruptible Power Supply
 /tcp genie Genie Protocol
 /tcp decap decap
 /tcp nced nced
 /tcp ncld ncld
 /tcp imsp Interactive Mail Support Protocol
 /tcp timbuktu Timbuktu
 /tcp prm-sm Prospero Resource Manager Sys. Man.
 /tcp prm-nm Prospero Resource Manager Node Man.
 /tcp decladebug DECLadebug Remote Debug Protocol
 /tcp rmt Remote MT Protocol
 /tcp synoptics-trap Trap Convention Port
 /tcp smsp SMSP
 /tcp infoseek InfoSeek
 /tcp bnet BNet
 /tcp silverplatter Silverplatter
 /tcp onmux Onmux
 /tcp hyper-g Hyper-G
 /tcp ariel1 Ariel
 /tcp smpte SMPTE
 /tcp ariel2 Ariel
 /tcp ariel3 Ariel
 /tcp opc-job-start IBM Operations Planning and Control Start
 /tcp opc-job-track IBM Operations Planning and Control Track
 /tcp icad-el ICAD
 /tcp smartsdp smartsdp
 /tcp svrloc Server Location
 /tcp ocs_cmu OCS_CMU
 /tcp ocs_amu OCS_AMU
 /tcp utmpsd UTMPSD
 /tcp utmpcd UTMPCD
 /tcp iasd IASD
 /tcp nnsp NNSP
 /tcp mobileip-agent MobileIP-Agent
 /tcp mobilip-mn MobilIP-MN
 /tcp dna-cml DNA-CML
 /tcp comscm comscm
 /tcp dsfgw dsfgw
 /tcp dasp dasp Thomas Obermair
 /tcp sgcp sgcp
 /tcp decvms-sysmgt decvms-sysmgt
 /tcp cvc_hostd cvc_hostd
 /tcp https http protocol over TLS/SSL
 /tcp snpp Simple Network Paging Protocol
 /tcp microsoft-ds Microsoft-DS
 /tcp ddm-rdb DDM-RDB
 /tcp ddm-dfm DDM-RFM
 /tcp ddm-ssl DDM-SSL
 /tcp as-servermap AS Server Mapper
 /tcp tserver TServer
 /tcp sfs-smp-net Cray Network Semaphore server
 /tcp creativeserver CreativeServer
 /tcp contentserver ContentServer
 /tcp creativepartnr CreativePartnr
 /tcp macon-tcp macon-tcp
 /tcp scohelp scohelp
 /tcp appleqtc apple quick time
 /tcp ampr-rcmd ampr-rcmd
 /tcp skronk skronk
 /tcp datasurfsrv DataRampSrv
 /tcp datasurfsrvsec DataRampSrvSec
 /tcp alpes alpes
 /tcp kpasswd kpasswd
 /tcp smtps smtp protocol over TLS/SSL (was ssmtp)
 /tcp digital-vrc digital-vrc
 /tcp mylex-mapd mylex-mapd
 /tcp photuris proturis
 /tcp rcp Radio Control Protocol
 /tcp scx-proxy scx-proxy
 /tcp mondex Mondex
 /tcp ljk-login ljk-login
 /tcp hybrid-pop hybrid-pop
 /tcp tn-tl-w1 tn-tl-w1
 /tcp tcpnethaspsrv tcpnethaspsrv
 /tcp tn-tl-fd1 tn-tl-fd1
 /tcp ss7ns ss7ns
 /tcp spsc spsc
 /tcp iafserver iafserver
 /tcp iafdbase iafdbase
 /tcp ph Ph service
 /tcp bgs-nsi bgs-nsi
 /tcp ulpnet ulpnet
 /tcp integra-sme Integra Software Management Environment
 /tcp powerburst Air Soft Power Burst
 /tcp avian avian
 /tcp saft saft Simple Asynchronous File Transfer
 /tcp gss-http gss-http
 /tcp nest-protocol nest-protocol
 /tcp micom-pfs micom-pfs
 /tcp go-login go-login
 /tcp ticf- Transport Independent Convergence for FNA
 /tcp ticf- Transport Independent Convergence for FNA
 /tcp pov-ray POV-Ray
 /tcp intecourier intecourier
 /tcp pim-rp-disc PIM-RP-DISC
 /tcp dantz dantz
 /tcp siam siam
 /tcp iso-ill ISO ILL Protocol
 /tcp isakmp isakmp
 /tcp stmf STMF
 /tcp asa-appl-proto asa-appl-proto
 /tcp intrinsa Intrinsa
 /tcp citadel citadel
 /tcp mailbox-lm mailbox-lm
 /tcp ohimsrv ohimsrv
 /tcp crs crs
 /tcp xvttp xvttp
 /tcp snare snare
 /tcp fcp FirstClass Protocol
 /tcp passgo PassGo
 /tcp exec remote process execution;
 /tcp login remote login a la telnet;
 /tcp shell cmd
 /tcp printer spooler
 /tcp videotex videotex
 /tcp talk like tenex link, but across
 /tcp ntalk
 /tcp utime unixtime
 /tcp efs extended file name server
 /tcp ripng ripng
 /tcp ulp ULP
 /tcp ibm-db2 IBM-DB2
 /tcp ncp NCP
 /tcp timed timeserver
 /tcp tempo newdate
 /tcp stx Stock IXChange
 /tcp custix Customer IXChange
 /tcp irc-serv IRC-SERV
 /tcp courier rpc
 /tcp conference chat
 /tcp netnews readnews
 /tcp netwall for emergency broadcasts
 /tcp mm-admin MegaMedia Admin
 /tcp iiop iiop
 /tcp opalis-rdv opalis-rdv
 /tcp nmsp Networked Media Streaming Protocol
 /tcp gdomap gdomap
 /tcp apertus-ldp Apertus Technologies Load Determination
 /tcp uucp uucpd
 /tcp uucp-rlogin uucp-rlogin
 /tcp commerce commerce
 /tcp klogin
 /tcp kshell krcmd
 /tcp appleqtcsrvr appleqtcsrvr
 /tcp dhcpv6-client DHCPv6 Client
 /tcp dhcpv6-server DHCPv6 Server
 /tcp afpovertcp AFP over TCP
 /tcp idfp IDFP
 /tcp new-rwho new-who
 /tcp cybercash cybercash
 /tcp deviceshare deviceshare
 /tcp pirp pirp
 /tcp rtsp Real Time Stream Control Protocol
 /tcp dsf
 /tcp remotefs rfs server
 /tcp openvms-sysipc openvms-sysipc
 /tcp sdnskmp SDNSKMP
 /tcp teedtap TEEDTAP
 /tcp rmonitor rmonitord
 /tcp monitor
 /tcp chshell chcmd
 /tcp nntps nntp protocol over TLS/SSL (was snntp)
 /tcp 9pfs plan  file service
 /tcp whoami whoami
 /tcp streettalk streettalk
 /tcp banyan-rpc banyan-rpc
 /tcp ms-shuttle microsoft shuttle
 /tcp ms-rome microsoft rome
 /tcp meter demon
 /tcp meter udemon
 /tcp sonar sonar
 /tcp banyan-vip banyan-vip
 /tcp ftp-agent FTP Software Agent System
 /tcp vemmi VEMMI
 /tcp ipcd ipcd
 /tcp vnas vnas
 /tcp ipdd ipdd
 /tcp decbsrv decbsrv
 /tcp bdp Bundle Discovery Protocol
 /tcp cal CAL
 /tcp eyelink EyeLink
 /tcp tns-cml TNS CML
 /tcp http-rpc-epmap HTTP RPC Ep Map
 /tcp tpip TPIP
 /tcp smsd SMSD
 /tcp acp Aeolon Core Protocol
 /tcp ipcserver Sun IPC server
 /tcp urm Cray Unified Resource Manager
 /tcp nqs nqs
 /tcp sift-uft Sender-Initiated/Unsolicited File Transfer
 /tcp npmp-trap npmp-trap
 /tcp npmp-local npmp-local
 /tcp npmp-gui npmp-gui
 /tcp hmmp-op HMMP Operation
 /tcp sco-websrvrmgr SCO WebServer Manager
 /tcp escp-ip ESCP
 /tcp dec_dlm DEC DLM
 /tcp asia ASIA
 /tcp qmqp QMQP
 /tcp rda RDA
 /tcp ipp IPP (Internet Printing Protocol)
 /tcp bmpp bmpp
 /tcp ginad ginad
 /tcp rlzdbase RLZ DBase
 /tcp ldaps ldap protocol over TLS/SSL (was sldap)
 /tcp lanserver lanserver
 /tcp msdp MSDP
 /tcp doom doom Id Software
 /tcp disclose campaign contribution disclosures - SDR Technologies
 /tcp mecomm MeComm
 /tcp meregister MeRegister
 /tcp vacdsm-sws VACDSM-SWS
 /tcp vacdsm-app VACDSM-APP
 /tcp vpps-qua VPPS-QUA
 /tcp cimplex CIMPLEX
 /tcp acap ACAP
 /tcp dctp DCTP
 /tcp elcsd errlog copy/server daemon
 /tcp agentx AgentX
 /tcp entrust-kmsh Entrust Key Management Service Handler
 /tcp entrust-ash Entrust Administration Service Handler
 /tcp netviewdm1 IBM NetView DM/ Server/Client
 /tcp netviewdm2 IBM NetView DM/ send/tcp
 /tcp netviewdm3 IBM NetView DM/ receive/tcp
 /tcp netgw netGW
 /tcp netrcs Network based Rev. Cont. Sys.
 /tcp flexlm Flexible License Manager
 /tcp fujitsu-dev Fujitsu Device Control
 /tcp ris-cm Russell Info Sci Calendar Manager
 /tcp kerberos-adm kerberos administration
 /tcp rfile
 /tcp pump
 /tcp qrh
 /tcp rrh
 /tcp tell send
 /tcp nlogin
 /tcp con
 /tcp ns
 /tcp rxe
 /tcp quotad
 /tcp cycleserv
 /tcp omserv
 /tcp webster
 /tcp vid
 /tcp cadlock
 /tcp rtip
 /tcp cycleserv2
 /tcp submit
 /tcp rpasswd
 /tcp wpages
 /tcp wpgs
 /tcp concert Concert
 /tcp qsc QSC
 /tcp device
 /tcp rsync rsync
 /tcp iclcnet-locate ICL coNETion locate server
 /tcp iclcnet_svinfo ICL coNETion server info
 /tcp accessbuilder AccessBuilder
 /tcp omginitialrefs OMG Initial Refs
 /tcp xact-backup xact-backup
 /tcp ftps ftp protocol, control, over TLS/SSL
 /tcp nas Netnews Administration System
 /tcp telnets telnet protocol over TLS/SSL
 /tcp imaps imap4 protocol over TLS/SSL
 /tcp ircs irc protocol over TLS/SSL
 /tcp pop3s pop3 protocol over TLS/SSL (was spop3)
 /tcp vsinet vsinet
 /tcp maitrd
 /tcp busboy
 /tcp garcon /tcp cadlock
 /tcp surf surf
 /tcp Reserved Reserved
 以上是固定端口
 /tcp iad1 BBN IAD /tcp iad2 BBN IAD /tcp iad3 BBN IAD /tcp
 /tcp iad1 BBN IAD
 /tcp iad2 BBN IAD
 /tcp iad3 BBN IAD
 /tcp neod1 Sun‘s NEO Object Request Broker
 /tcp neod2 Sun‘s NEO Object Request Broker
 /tcp nim nim
 /tcp nimreg nimreg
 /tcp instl_boots Installation Bootstrap Proto. Serv.
 /tcp instl_bootc Installation Bootstrap Proto. Cli.
 /tcp socks Socks
 /tcp ansoft-lm- Anasoft License Manager
 /tcp ansoft-lm- Anasoft License Manager
 /tcp murray Murray
 /tcp nfa Network File Access
 /tcp lupa lupa
 /tcp nerv SNI R&D network
 /tcp nmsd NMSD
 /tcp hermes
 /tcp bmc_patroldb BMC_PATROLDB
 /tcp pdps Photoscript Distributed Printing System
 /tcp pip PIP
 /tcp vpjp VPJP
 /tcp alta-ana-lm Alta Analytics License Manager
 /tcp bbn-mmc multi media conferencing
 /tcp bbn-mmx multi media conferencing
 /tcp sbook Registration Network Protocol
 /tcp editbench Registration Network Protocol
 /tcp lotusnote Lotus Note
 /tcp relief Relief Consulting
 /tcp rightbrain RightBrain Software
 /tcp intuitive-edge Intuitive Edge
 /tcp cuillamartin CuillaMartin Company
 /tcp pegboard Electronic PegBoard
 /tcp connlcli CONNLCLI
 /tcp ftsrv FTSRV
 /tcp mimer MIMER
 /tcp linx LinX
 /tcp timeflies TimeFlies
 /tcp ndm-requester Network DataMover Requester
 /tcp ndm-server Network DataMover Server
 /tcp adapt-sna Network Software Associates
 /tcp netware-csp Novell NetWare Comm Service Platform
 /tcp dcs DCS
 /tcp screencast ScreenCast
 /tcp gv-us GlobalView to Unix Shell
 /tcp us-gv Unix Shell to GlobalView
 /tcp fc-cli Fujitsu Config Protocol
 /tcp fc-ser Fujitsu Config Protocol
 /tcp chromagrafx Chromagrafx
 /tcp molly EPI Software Systems
 /tcp bytex Bytex
 /tcp ibm-pps IBM Person to Person Software
 /tcp cichlid Cichlid License Manager
 /tcp elan Elan License Manager
 /tcp dbreporter Integrity Solutions
 /tcp telesis-licman Telesis Network License Manager
 /tcp apple-licman Apple Network License Manager
 /tcp udt_os
 /tcp gwha GW Hannaway Network License Manager
 /tcp os-licman Objective Solutions License Manager
 /tcp atex_elmd Atex Publishing License Manager
 /tcp checksum CheckSum License Manager
 /tcp cadsi-lm Computer Aided Design Software Inc LM
 /tcp objective-dbc Objective Solutions DataBase Cache
 /tcp iclpv-dm document.nbspManager
 /tcp iclpv-sc Storage Controller
 /tcp iclpv-sas Storage Access Server
 /tcp iclpv-pm Print Manager
 /tcp iclpv-nls Network Log Server
 /tcp iclpv-nlc Network Log Client
 /tcp iclpv-wsm PC Workstation Manager software
 /tcp dvl-activemail DVL Active Mail
 /tcp cadkey-licman Cadkey License Manager
 /tcp cadkey-tablet Cadkey Tablet Daemon
 /tcp prm-sm-np Prospero Resource Manager
 /tcp prm-nm-np Prospero Resource Manager
 /tcp igi-lm Infinite Graphics License Manager
 /tcp ibm-res IBM Remote Execution Starter
 /tcp netlabs-lm NetLabs License Manager
 /tcp dbsa-lm DBSA License Manager
 /tcp sophia-lm Sophia License Manager
 /tcp here-lm Here License Manager
 /tcp hiq HiQ License Manager
 /tcp af AudioFile
 /tcp innosys InnoSys
 /tcp innosys-acl Innosys-ACL
 /tcp ibm-mqseries IBM MQSeries
 /tcp dbstar DBStar
 /tcp novell-lu6. Novell LU6.
 /tcp timbuktu-srv1 Timbuktu Service  Port
 /tcp timbuktu-srv2 Timbuktu Service  Port
 /tcp timbuktu-srv3 Timbuktu Service  Port
 /tcp timbuktu-srv4 Timbuktu Service  Port
 /tcp gandalf-lm Gandalf License Manager
 /tcp autodesk-lm Autodesk License Manager
 /tcp essbase Essbase Arbor Software
 /tcp hybrid Hybrid Encryption Protocol
 /tcp zion-lm Zion Software License Manager
 /tcp sais Satellite-data Acquisition System
 /tcp mloadd mloadd monitoring tool
 /tcp informatik-lm Informatik License Manager
 /tcp nms Hypercom NMS
 /tcp tpdu Hypercom TPDU
 /tcp rgtp Reverse Gossip Transport
 /tcp blueberry-lm Blueberry Software License Manager
 /tcp ms-sql-s Microsoft-SQL-Server
 /tcp ms-sql-m Microsoft-SQL-Monitor
 /tcp ibm-cics IBM CICS
 /tcp saism Satellite-data Acquisition System
 /tcp tabula Tabula
 /tcp eicon-server Eicon Security Agent/Server
 /tcp eicon-x25 Eicon X25/SNA Gateway
 /tcp eicon-slp Eicon Service Location Protocol
 /tcp cadis- Cadis License Management
 /tcp cadis- Cadis License Management
 /tcp ies-lm Integrated Engineering Software
 /tcp marcam-lm Marcam License Management
 /tcp proxima-lm Proxima License Manager
 /tcp ora-lm Optical Research Associates License Manager
 /tcp apri-lm Applied Parallel Research LM
 /tcp oc-lm OpenConnect License Manager
 /tcp peport PEport
 /tcp dwf Tandem Distributed Workbench Facility
 /tcp infoman IBM Information Management
 /tcp gtegsc-lm GTE Government Systems License Man
 /tcp genie-lm Genie License Manager
 /tcp interhdl_elmd interHDL License Manager
 /tcp esl-lm ESL License Manager
 /tcp dca DCA
 /tcp valisys-lm Valisys License Manager
 /tcp nrcabq-lm Nichols Research Corp.
 /tcp proshare1 Proshare Notebook Application
 /tcp proshare2 Proshare Notebook Application
 /tcp ibm_wrless_lan IBM Wireless LAN
 /tcp world-lm World License Manager
 /tcp nucleus Nucleus
 /tcp msl_lmd MSL License Manager
 /tcp pipes Pipes Platform
 /tcp oceansoft-lm Ocean Software License Manager
 /tcp csdmbase CSDMBASE
 /tcp csdm CSDM
 /tcp aal-lm Active Analysis Limited License Manager
 /tcp uaiact Universal Analytics
 /tcp csdmbase csdmbase
 /tcp csdm csdm
 /tcp openmath OpenMath
 /tcp telefinder Telefinder
 /tcp taligent-lm Taligent License Manager
 /tcp clvm-cfg clvm-cfg
 /tcp ms-sna-server ms-sna-server
 /tcp ms-sna-base ms-sna-base
 /tcp dberegister dberegister
 /tcp pacerforum PacerForum
 /tcp airs AIRS
 /tcp miteksys-lm Miteksys License Manager
 /tcp afs AFS License Manager
 /tcp confluent Confluent License Manager
 /tcp lansource LANSource
 /tcp nms_topo_serv nms_topo_serv
 /tcp localinfosrvr LocalInfoSrvr
 /tcp docstor DocStor
 /tcp dmdocbroker dmdocbroker
 /tcp insitu-conf insitu-conf
 /tcp anynetgateway anynetgateway
 /tcp stone-design- stone-design-
 /tcp netmap_lm netmap_lm
 /tcp ica ica
 /tcp cvc cvc
 /tcp liberty-lm liberty-lm
 /tcp rfx-lm rfx-lm
 /tcp sybase-sqlany Sybase SQL Any
 /tcp fhc Federico Heinz Consultora
 /tcp vlsi-lm VLSI License Manager
 /tcp saiscm Satellite-data Acquisition System
 /tcp shivadiscovery Shiva
 /tcp imtc-mcs Databeam
 /tcp evb-elm EVB Software Engineering License Manager
 /tcp funkproxy Funk Software, Inc.
 /tcp utcd Universal Time daemon (utcd)
 /tcp symplex symplex
 /tcp diagmond diagmond
 /tcp robcad-lm Robcad, Ltd. License Manager
 /tcp mvx-lm Midland Valley Exploration Ltd. Lic. Man.
 /tcp 3l-l1 3l-l1
 /tcp wins Microsoft‘s Windows Internet Name Service
 /tcp fujitsu-dtc Fujitsu Systems Business of America, Inc
 /tcp fujitsu-dtcns Fujitsu Systems Business of America, Inc
 /tcp ifor-protocol ifor-protocol
 /tcp vpad Virtual Places Audio data
 /tcp vpac Virtual Places Audio control
 /tcp vpvd Virtual Places Video data
 /tcp vpvc Virtual Places Video control
 /tcp atm-zip-office atm zip office
 /tcp ncube-lm nCube License Manager
 /tcp ricardo-lm Ricardo North America License Manager
 /tcp cichild-lm cichild
 /tcp orasrv oracle
 /tcp prospero-np Prospero Directory Service non-priv
 /tcp pdap-np Prospero Data Access Prot non-priv
 /tcp tlisrv oracle
 /tcp mciautoreg micautoreg
 /tcp coauthor oracle
 /tcp rap-service rap-service
 /tcp rap-listen rap-listen
 /tcp miroconnect miroconnect
 /tcp virtual-places Virtual Places Software
 /tcp micromuse-lm micromuse-lm
 /tcp ampr-info ampr-info
 /tcp ampr-inter ampr-inter
 /tcp sdsc-lm isi-lm
 /tcp 3ds-lm 3ds-lm
 /tcp intellistor-lm Intellistor License Manager
 /tcp rds rds
 /tcp rds2 rds2
 /tcp gridgen-elmd gridgen-elmd
 /tcp simba-cs simba-cs
 /tcp aspeclmd aspeclmd
 /tcp vistium-share vistium-share
 /tcp abbaccuray abbaccuray
 /tcp laplink laplink
 /tcp axon-lm Axon License Manager
 /tcp shivahose Shiva Hose
 /tcp 3m-image-lm Image Storage license manager 3M Company
 /tcp hecmtl-db HECMTL-DB
 /tcp pciarray pciarray
 /tcp sna-cs sna-cs
 /tcp caci-lm CACI Products Company License Manager
 /tcp livelan livelan
 /tcp ashwin AshWin CI Tecnologies
 /tcp arbortext-lm ArborText License Manager
 /tcp xingmpeg xingmpeg
 /tcp web2host web2host
 /tcp asci-val asci-val
 /tcp facilityview facilityview
 /tcp pconnectmgr pconnectmgr
 /tcp cadabra-lm Cadabra License Manager
 /tcp pay-per-view Pay-Per-View
 /tcp winddlb WinDD
 /tcp corelvideo CORELVIDEO
 /tcp jlicelmd jlicelmd
 /tcp tsspmap tsspmap
 /tcp ets ets
 /tcp orbixd orbixd
 /tcp rdb-dbs-disp Oracle Remote Data Base
 /tcp chip-lm Chipcom License Manager
 /tcp itscomm-ns itscomm-ns
 /tcp mvel-lm mvel-lm
 /tcp oraclenames oraclenames
 /tcp moldflow-lm moldflow-lm
 /tcp hypercube-lm hypercube-lm
 /tcp jacobus-lm Jacobus License Manager
 /tcp ioc-sea-lm ioc-sea-lm
 /tcp tn-tl-r1 tn-tl-r1
 /tcp mil-- MIL--
 /tcp msims MSIMS
 /tcp simbaexpress simbaexpress
 /tcp tn-tl-fd2 tn-tl-fd2
 /tcp intv intv
 /tcp ibm-abtact ibm-abtact
 /tcp pra_elmd pra_elmd
 /tcp triquest-lm triquest-lm
 /tcp vqp VQP
 /tcp gemini-lm gemini-lm
 /tcp ncpm-pm ncpm-pm
 /tcp commonspace commonspace
 /tcp mainsoft-lm mainsoft-lm
 /tcp sixtrak sixtrak
 /tcp radio radio
 /tcp radio-sm radio-sm
 /tcp orbplus-iiop orbplus-iiop
 /tcp picknfs picknfs
 /tcp simbaservices simbaservices
 /tcp issd
 /tcp aas aas
 /tcp inspect inspect
 /tcp picodbc pickodbc
 /tcp icabrowser icabrowser
 /tcp slp Salutation Manager (Salutation Protocol)
 /tcp slm-api Salutation Manager (SLM-API)
 /tcp stt stt
 /tcp smart-lm Smart Corp. License Manager
 /tcp isysg-lm isysg-lm
 /tcp taurus-wh taurus-wh
 /tcp ill Inter Library Loan
 /tcp netbill-trans NetBill Transaction Server
 /tcp netbill-keyrep NetBill Key Repository
 /tcp netbill-cred NetBill Credential Server
 /tcp netbill-auth NetBill Authorization Server
 /tcp netbill-prod NetBill Product Server
 /tcp nimrod-agent Nimrod Inter-Agent Communication
 /tcp skytelnet skytelnet
 /tcp xs-openstorage xs-openstorage
 /tcp faxportwinport faxportwinport
 /tcp softdataphone softdataphone
 /tcp ontime ontime
 /tcp jaleosnd jaleosnd
 /tcp udp-sr-port udp-sr-port
 /tcp svs-omagent svs-omagent
 /tcp cncp CableNet Control Protocol
 /tcp cnap CableNet Admin Protocol
 /tcp cnip CableNet Info Protocol
 /tcp cert-initiator cert-initiator
 /tcp cert-responder cert-responder
 /tcp invision InVision
 /tcp isis-am isis-am
 /tcp isis-ambc isis-ambc
 /tcp datametrics datametrics
 /tcp sa-msg-port sa-msg-port
 /tcp rsap rsap
 /tcp concurrent-lm concurrent-lm
 /tcp inspect inspect
 /tcp nkd nkd
 /tcp shiva_confsrvr shiva_confsrvr
 /tcp xnmp xnmp
 /tcp alphatech-lm alphatech-lm
 /tcp stargatealerts stargatealerts
 /tcp dec-mbadmin dec-mbadmin
 /tcp dec-mbadmin-h dec-mbadmin-h
 /tcp fujitsu-mmpdc fujitsu-mmpdc
 /tcp sixnetudr sixnetudr
 /tcp sg-lm Silicon Grail License Manager
 /tcp skip-mc-gikreq skip-mc-gikreq
 /tcp netview-aix- netview-aix-
 /tcp netview-aix- netview-aix-
 /tcp netview-aix- netview-aix-
 /tcp netview-aix- netview-aix-
 /tcp netview-aix- netview-aix-
 /tcp netview-aix- netview-aix-
 /tcp netview-aix- netview-aix-
 /tcp netview-aix- netview-aix-
 /tcp netview-aix- netview-aix-
 /tcp netview-aix- netview-aix-
 /tcp netview-aix- netview-aix-
 /tcp netview-aix- netview-aix-
 /tcp proshare-mc- Intel Proshare Multicast
 /tcp proshare-mc- Intel Proshare Multicast
 /tcp pdp Pacific Data Products
 /tcp netcomm1 netcomm1
 /tcp groupwise groupwise
 /tcp prolink prolink
 /tcp darcorp-lm darcorp-lm
 /tcp sd-elmd sd-elmd
 /tcp lanyon-lantern lanyon-lantern
 /tcp ncpm-hip ncpm-hip
 /tcp snaresecure SnareSecure
 /tcp n2nremote n2nremote
 /tcp cvmon cvmon
 /tcp nsjtp-ctrl nsjtp-ctrl
 /tcp nsjtp-data nsjtp-data
 /tcp firefox firefox
 /tcp ng-umds ng-umds
 /tcp empire-empuma empire-empuma
 /tcp sstsys-lm sstsys-lm
 /tcp rrirtr rrirtr
 /tcp rrimwm rrimwm
 /tcp rrilwm rrilwm
 /tcp rrifmm rrifmm
 /tcp rrisat rrisat
 /tcp rsvp-encap- RSVP-ENCAPSULATION-
 /tcp rsvp-encap- RSVP-ENCAPSULATION-
 /tcp mps-raft mps-raft
 /tcp l2f,l2tp l2f,l2tp
 /tcp deskshare deskshare
 /tcp hb-engine hb-engine
 /tcp bcs-broker bcs-broker
 /tcp slingshot slingshot
 /tcp jetform jetform
 /tcp vdmplay vdmplay
 /tcp gat-lmd gat-lmd
 /tcp centra centra
 /tcp impera impera
 /tcp pptconference pptconference
 /tcp registrar resource monitoring service
 /tcp conferencetalk ConferenceTalk
 /tcp sesi-lm sesi-lm
 /tcp houdini-lm houdini-lm
 /tcp xmsg xmsg
 /tcp fj-hdnet fj-hdnet
 /tcp h323gatedisc h323gatedisc
 /tcp h323gatestat h323gatestat
 /tcp h323hostcall h323hostcall
 /tcp caicci caicci
 /tcp hks-lm HKS License Manager
 /tcp pptp pptp
 /tcp csbphonemaster csbphonemaster
 /tcp iden-ralp iden-ralp
 /tcp iberiagames IBERIAGAMES
 /tcp winddx winddx
 /tcp telindus TELINDUS
 /tcp citynl CityNL License Management
 /tcp roketz roketz
 /tcp msiccp MSICCP
 /tcp proxim proxim
 /tcp siipat SIMS - SIIPAT Protocol for Alarm Transmission
 /tcp cambertx-lm Camber Corporation License Management
 /tcp privatechat PrivateChat
 /tcp street-stream street-stream
 /tcp ultimad ultimad
 /tcp gamegen1 GameGen1
 /tcp webaccess webaccess
 /tcp encore encore
 /tcp cisco-net-mgmt cisco-net-mgmt
 /tcp 3Com-nsd 3Com-nsd
 /tcp cinegrfx-lm Cinema Graphics License Manager
 /tcp ncpm-ft ncpm-ft
 /tcp remote-winsock remote-winsock
 /tcp ftrapid- ftrapid-
 /tcp ftrapid- ftrapid-
 /tcp oracle-em1 oracle-em1
 /tcp aspen-services aspen-services
 /tcp sslp Simple Socket Library‘s PortMaster
 /tcp swiftnet SwiftNet
 /tcp lofr-lm Leap of Faith Research License Manager
 /tcp translogic-lm Translogic License Manager
 /tcp oracle-em2 oracle-em2
 /tcp ms-streaming ms-streaming
 /tcp capfast-lmd capfast-lmd
 /tcp cnhrp cnhrp
 /tcp tftp-mcast tftp-mcast
 /tcp spss-lm SPSS License Manager
 /tcp www-ldap-gw www-ldap-gw
 /tcp cft- cft-
 /tcp cft- cft-
 /tcp cft- cft-
 /tcp cft- cft-
 /tcp cft- cft-
 /tcp cft- cft-
 /tcp cft- cft-
 /tcp cft- cft-
 /tcp bmc-net-adm bmc-net-adm
 /tcp bmc-net-svc bmc-net-svc
 /tcp vaultbase vaultbase
 /tcp essweb-gw EssWeb Gateway
 /tcp kmscontrol KMSControl
 /tcp global-dtserv global-dtserv
 /tcp femis Federal Emergency Management Information System
 /tcp powerguardian powerguardian
 /tcp pharmasoft pharmasoft
 /tcp dpkeyserv dpkeyserv
 /tcp answersoft-lm answersoft-lm
 /tcp hp-hcip hp-hcip
 /tcp fjris Fujitsu Remote Install Service
 /tcp finle-lm Finle License Manager
 /tcp windlm Wind River Systems License Manager
 /tcp funk-logger funk-logger
 /tcp funk-license funk-license
 /tcp psmond psmond
 /tcp hello hello
 /tcp nmsp Narrative Media Streaming Protocol
 /tcp ea1 EA1
 /tcp ibm-dt- ibm-dt-
 /tcp rsc-robot rsc-robot
 /tcp cera-bcm cera-bcm
 /tcp dpi-proxy dpi-proxy
 /tcp vocaltec-admin Vocaltec Server Administration
 /tcp uma UMA
 /tcp etp Event Transfer Protocol
 /tcp netrisk NETRISK
 /tcp msmq Microsoft Message Que
 /tcp enl ENL
 /tcp fhsp Fujitsu Hot Standby Protocol
 /tcp radius RADIUS
 /tcp radius-acct RADIUS Accounting
 /tcp tdp-suite TDP Suite
 /tcp mmpft MMPFT
 /tcp harp HARP
 /tcp etftp Enhanced Trivial File Transfer Protocol
 /tcp plato-lm Plato License Manager
 /tcp mcagent mcagent
 /tcp donnyworld donnyworld
 /tcp es-elmd es-elmd
 /tcp unisys-lm Unisys Natural Language License Manager
 /tcp metrics-pas metrics-pas
 /tcp gsi GSI
 /tcp msnp MSNP
 /tcp entp ENTP
 /tcp fjicl-tep-a Fujitsu ICL Terminal Emulator Program A
 /tcp fjicl-tep-b Fujitsu ICL Terminal Emulator Program B
 /tcp linkname Local Link Name Resolution
 /tcp fjicl-tep-c Fujitsu ICL Terminal Emulator Program C
 /tcp sugp Secure UP.Link Gateway Protocol
 /tcp tpmd TPortMapperReq
 /tcp dawn Dawn
 /tcp mtp Starlight Networks Multimedia Transport Protocol
 /tcp armadp armadp
 /tcp elm-momentum Elm-Momentum
 /tcp facelink FACELINK
 /tcp persona Persoft Persona
 /tcp noagent nOAgent
 /tcp noadmin NoAdmin
 /tcp close-combat close-combat
 /tcp dialogic-elmd dialogic-elmd
 /tcp tekpls tekpls
 /tcp hlserver hlserver
 /tcp eye2eye eye2eye
 /tcp ismaeasdaqlive ISMA Easdaq Live
 /tcp ismaeasdaqtest ISMA Easdaq Test
 /tcp bcs-lmserver bcs-lmserver
 /tcp dlsrap Data Link Switching Remote Access Protocol
 /tcp hsrp Hot Standby Router Protocol
 /tcp licensedaemon cisco license management
 /tcp tr-rsrb-p1 cisco RSRB Priority  port
 /tcp tr-rsrb-p2 cisco RSRB Priority  port
 /tcp tr-rsrb-p3 cisco RSRB Priority  port
 /tcp mshnet MHSnet system
 /tcp stun-p1 cisco STUN Priority  port
 /tcp stun-p2 cisco STUN Priority  port
 /tcp stun-p3 cisco STUN Priority  port
 /tcp ipsendmsg IPsendmsg
 /tcp snmp-tcp-port cisco SNMP TCP port
 /tcp stun-port cisco serial tunnel port
 /tcp perf-port cisco perf port
 /tcp tr-rsrb-port cisco Remote SRB port
 /tcp gdp-port cisco Gateway Discovery Protocol
 /tcp x25-svc-port cisco X. service (XOT)
 /tcp tcp-id-port cisco identification port
 /tcp callbook
 /tcp dc
 /tcp globe
 /tcp mailbox
 /tcp berknet
 /tcp dectalk
 /tcp ttyinfo
 /tcp raid-am
 /tcp troff
 /tcp cypress
 /tcp ellpack
 /tcp device2
 /tcp blackboard
 /tcp glogger
 /tcp imsldoc
 /tcp lam
 /tcp isis isis
 /tcp rimsl
 /tcp cdfunc
 /tcp sdfunc
 /tcp dls
 /tcp shilp
 /tcp nfs Network File System - Sun Microsystems
 /tcp dlsrpn Data Link Switch Read Port Number
 /tcp dlswpn Data Link Switch Write Port Number
 /tcp lrp Load Report Protocol
 /tcp prp PRP
 /tcp zephyr-srv Zephyr server
 /tcp zephyr-clt Zephyr serv-hm connection
 /tcp zephyr-hm Zephyr hostmanager
 /tcp minipay MiniPay
 /tcp ici ICI
 /tcp ats Advanced Training System Program
 /tcp kali Kali
 /tcp unreg-ab2 Allen-Bradley unregistered port
 /tcp ivs-video IVS Video default
 /tcp directplay DirectPlay
 /tcp nani Nani
 /tcp recipe RECIPe
 /tcp ivsd IVS Daemon
 /tcp foliocorp Folio Remote Server
 /tcp xmquery xmquery
 /tcp lnvpoller LNVPOLLER
 /tcp lnvconsole LNVCONSOLE
 /tcp lnvalarm LNVALARM
 /tcp lnvstatus LNVSTATUS
 /tcp lnvmaps LNVMAPS
 /tcp lnvmailmon LNVMAILMON
 /tcp nas-metering NAS-Metering
 /tcp dna DNA
 /tcp netml NETML
 /tcp cvmmon CVMMON
 /tcp pehelp pehelp
 /tcp sdhelp sdhelp
 /tcp iapp IAPP (Inter Access Point Protocol)
 /tcp sent-lm SENT License Manager
 /tcp rdlap RDLAP over UDP
 /tcp ofsd ofsd
 /tcp 3d-nfsd 3d-nfsd
 /tcp idcp IDCP
 /tcp xingcsm xingcsm
 /tcp nvd NVD
 /tcp tscchat TSCCHAT
 /tcp snapp SNAPP
 /tcp ideesrv ideesrv
 /tcp fcmsys fcmsys
 /tcp dbm dbm
 /tcp gxtelmd GXT License Managemant
 /tcp futrix Futrix
 /tcp rsmtp RSMTP
 /tcp wusage Wusage
 /tcp ncl NCL
 /tcp orbiter Orbiter
 /tcp cvspserver cvspserver
 /tcp orion Orion
 /tcp cdn CDN
 /tcp comtest COMTEST
 /tcp cas cas
 /tcp g-talk G-Talk
 /tcp rnrp RNRP
 /tcp stgcp Simple telephony Gateway Control Protocol
 /tcp ott One Way Trip Time
 /tcp ft-role FT-ROLE
 /tcp venus venus
 /tcp codasrv codasrv
 /tcp topx TOP/X
 /tcp msp MSP
 /tcp powerclientcsf PowerClient Central Storage Facility
 /tcp dtn1 DTN1
 /tcp ovwdb OpenView NNM daemon
 /tcp ratl RATL
 /tcp netchat netchat
 /tcp griffin griffin
 /tcp rtsserv Resource Tracking system server
 /tcp rtsclient Resource Tracking system client
 /tcp ncr_ccl NCR CCL
 /tcp utsftp UTS FTP
 /tcp ovtopmd OVTOPMD
 /tcp netrek netrek
 /tcp dict DICT
 /tcp pk-electronics PK Electronics
 /tcp solve Solve
 /tcp aminet AMInet
 /tcp hdl-srv HDL Server
 /tcp tragic Tragic
 /tcp and-lm AND Licence Manager
 /tcp sonus Sonus
 /tcp unglue UNIX Nt Glue
 /tcp kana Kana
 /tcp tqdata tqdata
 /tcp www-dev world wide web - development
 /tcp aic-np aic-np
 /tcp aic-oncrpc aic-oncrpc - Destiny MCD database
 /tcp piccolo piccolo - Cornerstone Software
 /tcp fryeserv NetWare Loadable Module - Seagate Software
 /tcp media-agent Media Agent
 /tcp mao mao
 /tcp epicon Epicon
 /tcp netclip Net Clip
 /tcp signal Signal
 /tcp fjmpcm Fujitsu Configuration Management Service
 /tcp hbci HBCI
 /tcp redwood-broker Redwood Broker
 /tcp cgms CGMS
 /tcp gw Telerate Workstation
 /tcp twsdss Trusted Web Client
 /tcp cifs CIFS
 /tcp hlserver Fast Security HL Server
 /tcp pctrader Sierra Net PC Trader
 /tcp nsws NSWS
 /tcp cardbox Cardbox
 /tcp icpv2 ICPv2
 /tcp vmodem VMODEM
 /tcp seaview Sea View
 /tcp rfio RFIO
 /tcp ccmail cc:mail/lotus
 /tcp ns-cfg-server NS CFG Server
 /tcp ibm-dial-out IBM Dial Out
 /tcp msft-gc Microsoft Global Catalog
 /tcp sxmp Simple Extensible Multiplexed Protocol
 /tcp samd SAMD
 /tcp admind admind
 /tcp sysopt SYSOPT
 /tcp 4talk 4Talk
 /tcp plato Plato
 /tcp e-net E-Net
 /tcp cops COPS
 /tcp enpc ENPC
 /tcp caps-lm CAPS LOGISTICS TOOLKIT - LM
 /tcp sah-lm S A Holditch & Associates - LM
 /tcp fg-fps fg-fps
 /tcp fg-gip fg-gip
 /tcp rib-slm Rib License Manager
 /tcp pdrncs pdrncs
 /tcp opsession-srvr OP Session Server
 /tcp mysql MySQL
 /tcp tns-adv TNS ADV
 /tcp uorb Unify Object Broker
 /tcp uohost Unify Object Host
 /tcp cdid CDID
 /tcp ssrip Swith to Swith Routing Information Protocol
 /tcp sdt-lmd SDT License Manager
 /tcp vnsstr VNSSTR
 /tcp sftu SFTU
 /tcp bbars BBARS
 /tcp egptlm Eaglepoint License Manager
 /tcp hp-device-disc HP Device Disc
 /tcp mcs-calypsoicf MCS Calypso ICF
 /tcp dec-notes DEC Notes
 /tcp anet-b OMF data b
 /tcp anet-l OMF data l
 /tcp anet-m OMF data m
 /tcp anet-h OMF data h
 /tcp webtie WebTIE
 /tcp btrieve BTRIEVE
 /tcp ssql SSQL
 /tcp fatpipe FATPIPE
 /tcp suitjd SUITJD
 /tcp dj-ilm DJ ILM
 /tcp tip2 TIP
 /tcp wsicopy WSICOPY
 /tcp socorfs SOCORFS
 /tcp geneous Geneous
 /tcp esp-lm Enterprise Software Products License Manager
 /tcp dsc Distributed Service Coordinator
 /tcp savant SAVANT
 /tcp efi-lm EFI License Management
 /tcp dyna-lm Dyna License Manager (Elam)
 /tcp bmap Bull Apprise portmapper
 /tcp prsvp RSVP Port
 /tcp vat VAT default data
 /tcp vat-control VAT default control
 /tcp udt_os Unidata UDT OS
 /tcp mapper-nodemgr MAPPER network node manager
 /tcp mapper-mapethd MAPPER TCP/IP server
 /tcp mapper-ws_ethd MAPPER workstation server
 /tcp newoak NewOak
 /tcp netcheque NetCheque accounting
 /tcp bre BRE (Bridge Relay Element)
 /tcp nuts_dem NUTS Daemon
 /tcp nuts_bootp NUTS Bootp Server
 /tcp oidsr document.nbspReplication
 /tcp rwhois Remote Who Is
 /tcp unicall UNICALL
 /tcp elanlm ELAN LM
 /tcp itose ITOSE
 /tcp krb524 KRB524
 /tcp nv-video NV Video default
 /tcp n1-fwp N1-FWP
 /tcp privatewire PrivateWire
 /tcp camp Camp
 /tcp ctisystemmsg CTI System Msg
 /tcp ctiprogramload CTI Program Load
 /tcp sae-urn sae-urn
 /tcp urn-x-cdchoice urn-x-cdchoice
 /tcp sf-lm SF License Manager (Sentinel)
 /tcp rfa remote file access server
 /tcp iims Icona Instant Messenging System
 /tcp iwec Icona Web Embedded Chat
 /tcp ilss Icona License System Server
 /tcp htcp HTCP
 /tcp phrelay Photon Relay
 /tcp abbs ABBS
 /tcp rfe radio free ethernet
 /tcp fmpro-internal FileMaker, Inc. - Proprietary transport
 /tcp avt-profile- avt-profile-
 /tcp avt-profile- avt-profile-
 /tcp telelpathstart TelepathStart
 /tcp zenginkyo- zenginkyo-
 /tcp zenginkyo- zenginkyo-
 /tcp mmcc multimedia conference control tool
 /tcp sip SIP
 /tcp atmp Ascend Tunnel Management Protocol
 /tcp aol America-Online
 /tcp aol- AmericaOnline1
 /tcp aol- AmericaOnline2
 /tcp aol- AmericaOnline3
 /tcp pk PK
 /tcp hacl-hb # HA cluster heartbeat
 /tcp hacl-gs # HA cluster general services
 /tcp hacl-local # HA Cluster Commands
 /tcp hacl-test # HA Cluster Test
 /tcp sco-aip SCO AIP
 /tcp outlaws Outlaws
 /tcp tmlogin TM Login
 /tcp excerpt Excerpt Search
 /tcp mftp MFTP
 /tcp hpoms-dps-lstn HPOMS-DPS-LSTN
 /tcp foresyte-clear Foresyte-Clear
 /tcp salient-dtasrv Salient Data Server
 /tcp salient-usrmgr Salient User Manager
 /tcp actnet ActNet
 /tcp statusd StatusD
 /tcp mcntp MCNTP
 /tcp dj-ice DJ-ICE
 /tcp fcp-addr-srvr1 fcp-addr-srvr1
 /tcp fcp-addr-srvr2 fcp-addr-srvr2
 /tcp fcp-srvr-inst1 fcp-srvr-inst1
 /tcp fcp-srvr-inst2 fcp-srvr-inst2
 /tcp fcp-cics-gw1 fcp-cics-gw1
 /tcp personal-agent Personal Agent
 /tcp a1-msc A1-MSC
 /tcp a1-bs A1-BS
 /tcp pcanywheredata pcANYWHEREdata
 /tcp pcanywherestat pcANYWHEREstat
 /tcp rrac Remote Replication Agent Connection
 /tcp dccm Direct Cable Connect Manager
 /tcp proshareaudio proshare conf audio
 /tcp prosharevideo proshare conf video
 /tcp prosharedata proshare conf data
 /tcp prosharenotify proshare conf notify
 /tcp openmail Openmail User Agent Layer
 /tcp ida-discover1 IDA Discover Port
 /tcp ida-discover2 IDA Discover Port
 /tcp fcopy-server fcopy-server
 /tcp fcopys-server fcopys-server
 /tcp openmailg OpenMail Desk Gateway server
 /tcp x500ms OpenMail X. Directory Server
 /tcp openmailns OpenMail NewMail Server
 /tcp s-openmail OpenMail Suer Agent Layer (Secure)
 /tcp x11 X Window System
 /tcp softcm HP SoftBench CM
 /tcp spc HP SoftBench Sub-Process Control
 /tcp dtspcd dtspcd
 /tcp backup-express Backup Express
 /tcp meta-corp Meta Corporation License Manager
 /tcp aspentec-lm Aspen Technology License Manager
 /tcp watershed-lm Watershed License Manager
 /tcp statsci1-lm StatSci License Manager -
 /tcp statsci2-lm StatSci License Manager -
 /tcp lonewolf-lm Lone Wolf Systems License Manager
 /tcp montage-lm Montage License Manager
 /tcp ricardo-lm Ricardo North America License Manager
 /tcp tal-pod tal-pod
 /tcp crip CRIP
 /tcp clariion-evr01 clariion-evr01
 /tcp boks BoKS Master
 /tcp xdsxdm
 /tcp ircu IRCU
 /tcp vocaltec-gold Vocaltec Global Online Directory
 /tcp vision_server vision_server
 /tcp vision_elmd vision_elmd
 /tcp hnmp HNMP
 /tcp ambit-lm ambit-lm
 /tcp acmsoda acmsoda
 /tcp ups-onlinet onlinet uninterruptable power supplies
 /tcp dpserve DP Serve
 /tcp arcp ARCP
 /tcp lazy-ptop lazy-ptop
 /tcp font-service X Font Service
 /tcp virprot-lm Virtual Prototypes License Manager
 /tcp clutild Clutild
 /tcp fodms FODMS FLIP
 /tcp dlip DLIP
 /tcp winqedit winqedit
 /tcp pmdmgr OpenView DM Postmaster Manager
 /tcp xmpv7 OpenView DM xmpv7 api pipe
 /tcp pmd OpenView DM ovc/xmpv3 api pipe
 /tcp telops-lmd telops-lmd
 /tcp pafec-lm pafec-lm
 /tcp nta-ds FlowAnalyzer DisplayServer
 /tcp nta-us FlowAnalyzer UtilityServer
 /tcp sun-lm Sun License Manager
 /tcp cbt cbt
 /tcp accu-lmgr accu-lmgr
 /tcp t2-drm Tier  Data Resource Manager
 /tcp t2-brm Tier  Business Rules Manager
 /tcp irdmi2 iRDMI2
 /tcp irdmi iRDMI
 /tcp pro-ed ProEd
 /tcp cvd cvd
 /tcp sabarsd sabarsd
 /tcp abarsd abarsd
 /tcp admind admind
 /tcp npmp npmp
 /tcp vp2p Vitual Point to Point
 /tcp ddi-tcp- NewsEDGE server TCP (TCP )
 /tcp ddi-tcp- Desktop Data TCP
 /tcp ddi-tcp- Desktop Data TCP
 /tcp ddi-tcp- Desktop Data TCP : NESS application
 /tcp ddi-tcp- Desktop Data TCP : FARM product
 /tcp ddi-tcp- Desktop Data TCP : NewsEDGE/Web application
 /tcp ddi-tcp- Desktop Data TCP : COAL application
 /tcp cslistener CSlistener
 /tcp sctp SCTP
 /tcp websm WebSM
 /tcp man
 /tcp msgsys Message System
 /tcp pds Ping Discovery Service
 /tcp sd Session Director
 /tcp palace Palace
 /tcp palace Palace
 /tcp palace Palace
 /tcp palace Palace
 /tcp palace Palace
 /tcp palace Palace
 /tcp distinct32 Distinct32
 /tcp distinct distinct
 /tcp ndmp Network Data Management Protocol
 /tcp irisa IRISA
 /tcp metasys Metasys
 /tcp tsaf tsaf port
 /tcp i-zipqd I-ZIPQD
 /tcp bprd BPRD Protocol (VERITAS NetBackup)
 /tcp bpbrm BPBRM Protocol (VERITAS NetBackup)
 /tcp bpcd VERITAS NetBackup
 /tcp chipper Chipper
 /tcp biimenu Beckman Instruments, Inc.
 /tcp hp-sco hp-sco
 /tcp hp-sca hp-sca
 /tcp jcp JCP Client
 /tcp webphone webphone
 /tcp netspeak-is NetSpeak Corp. Directory Services
 /tcp netspeak-cs NetSpeak Corp. Connection Services
 /tcp netspeak-acd NetSpeak Corp. Automatic Call Distribution
 /tcp netspeak-cps NetSpeak Corp. Credit Processing System
 /tcp wnn6 wnn6
 /tcp vocaltec-wconf Vocaltec Web Conference
 /tcp aws-brf Telerate Information Platform LAN
 /tcp brf-gw Telerate Information Platform WAN
 /tcp med-ltp med-ltp
 /tcp med-ovw med-ovw
 /tcp med-ci med-ci
 /tcp icl-twobase1 icl-twobase1
 /tcp icl-twobase2 icl-twobase2
 /tcp icl-twobase3 icl-twobase3
 /tcp icl-twobase4 icl-twobase4
 /tcp icl-twobase5 icl-twobase5
 /tcp icl-twobase6 icl-twobase6
 /tcp icl-twobase7 icl-twobase7
 /tcp icl-twobase8 icl-twobase8
 /tcp icl-twobase9 icl-twobase9
 /tcp icl-twobase10 icl-twobase10
 /tcp vocaltec-hos Vocaltec Address Server
 /tcp quake quake
 /tcp wnn6-ds wnn6-ds
 /tcp eba EBA PRISE
 /tcp dbbrowse Databeam Corporation
 /tcp ap ALC Protocol
 /tcp bacnet Building Automation and Control Networks 

四、  何可通过端口可以干什么？

信息搜集  目标探测

服务判断  系统判断

系统角色分析

五、  注册表

打开注册表  win+R 输入regedit

作用，结构，入侵常用到的

注册表五大根键：

　　HKEY_CLASSES_ROOT  管理文件系统

　　HKEY_CURRENT_USER  管理当前用户信息

　　HKEY_LOCAL_MACHINE  管理系统硬件配置

　　HKEY_USERS  管理系统用户信息

　　HKEY_CURRENT_CONFIG  管理当前用户系统的配置

在注册表中，将来宾用户的键值克隆为系统管理员的键值后，在使用来宾用户登录时做的操作就不会再新建用户文件了，而是直接记录在系统管理员的用户文件中，从而做的隐藏行踪。

RUN  管理开机启动项的

Win+R 输入msconfig 可以打开开机自启的设置管理

入侵常用到的：

　　HKEY_LOCAL_MACHINE\software\hzhost\config\settings\mysqlpass

　　HKEY_LOCAL_MACHINE\software\hzhost\config\settings\mssqlpass

　　HKEY_LOCAL_MACHINE\software\hzhost\config\settings\mastersvrpass

　　HKEY_LOCAL_MACHINE\SYSTEM\LIWEIWENSOFT\INSTALLREEADMIM\11

　　HKEY_LOCAL_MACHINE\SYSTEM\LIWEIWENSOFT\INSTALLFreeHost\11

六、  黑客常用Dos命令

color  改变cmd的字体颜色  color ?

ping –t –l 65550 ip  死亡之ping

ipconfig  查看IP

ipconfig/release  释放IP

ipconfig/renew  重新获得IP

ipconfig/all  查看有关IP的所有信息  config/?

ipconfig/fiusahdns  清除dns缓存信息

systeminfo  查看系统信息

arp –a  查看srp缓存表  在局域网中，主机之间通信靠的是MAC地址

net view  查看局域网中的其他计算机名称

cls  清屏

shutdown –s –t 180 –c “你被黑了，系统将马上关机”  在180秒后关机，并弹出一句话

dir  查看目录

dir /a  查看隐藏目录

cd  目录切换

cd \  退回上一级

cd ..  退回上一级

start www.xxx.com  打开网页

start 123.txt  打开123.txt文件

copy con c:\123.txt  创建123.txt文件

hello word  文件中写的内容

ctrl+z  保存并退出编辑

md 目录名  创建目录

rd 123删除文件123

ren 原文件名 新文件名  对文件进行重命名

del  删除文件

copy  复制文件  copy 1.txt d:\

move  移动文件 （剪贴）

tree树形列出文件夹结构

telnet  远程连接  telnet ip 用户名 密码 （可用来探测端口）

net use k:\\192.168.1.103\c$  映射磁盘，将目标地址的c盘映射到本地的k盘中

net use k:\\192.168.1.103\c$/dell  删除映射

net start  查看开启的服务

net start 服务名  开启某服务  （在服务名中有空格时，用引号引起来）

net stop 服务名  停止某服务

net user 用户名 密码 /add  建立新用户

net user guest /active:yes  激活guest用户

net user guest /active:no  关闭guest用户

net user  查看有哪些用户

net user 用户名  查看账户属性

net user 用户名 /del  删除用户

net localgroup administrators 用户名 /add  把用户添加的本地管理员用户组

net localgroup administrators 用户名 /del  把用户从本地管理员用户组中删除

net user guest 12345  用guest用户登录并修改密码为12345

net password 密码  更改系统登录密码

net share  查看本地开启的共享

net share ipc$  开启ipc$共享

net share ipc$ /del  删除ipc$共享

net share c$ /del  删除c:共享

netstat –a  查看开启了哪些端口，常用netstat -an

netstat –n  查看端口的网络连接情况 常用netstat -an

netstat –v  查看正在进行的工具

netsh  网络工具

at id号  开启已注册的某个计划任务

at 21:58 shutdown -s –t 180

at /delete  停止所有的计划任务，用参数/yes就可以不用确定就全部停止

at id号 /delete  停止某个已经注册的计划任务

at  查看所有的计划任务

attrid 文件名(目录名)  查看某个文件（目录）的属性

attrib 文件名 -A –R –S –D  或 +A +R +S +H  去掉（添加）某个文件的存档、系统、隐藏属性

tasklist  查看进程

taskkill /f /im qq.exe  结束某个进程

msg cracer hello cracer  给用户发送一个详细弹窗

七、  批处理

　　批处理文件就是dos命令的组合文件，将dos命令逐行写在文档中，重命名为.bat文件，之后双击执行，系统就会逐行执行文件里面的命令。

2019-04-17  10:35:42