🔌 PwnBox // Imp Info
⚙️ General 🔎 Google Dorking 📡 Hacker Engines & Devices 🐧 Linux
// NETWORK PROTOCOL & PORT REFERENCE VAULT

NETWORKING PROTOCOLS & DEFAULT PORTS

An encyclopedic field directory of essential TCP/UDP ports, network protocols, operational roles, and cybersecurity exploit vectors. Every port includes a concise 2–3 line Hinglish breakdown explaining its real-world function and attack surface.

37 Ports Loaded
CATEGORIES:
PORT 7 TCP / UDP

ECHO

Echo Protocol
💡 Hinglish Explanation Yeh port incoming testing packets ko wapas sender ko echo (bhej) deta hai debugging ke liye. Attackers iska use karke UDP Amplification aur Smurf DoS attacks execute karte hain.
Low Risk / DoS Vector
PORT 20 TCP

FTP Data

File Transfer Protocol (Data Channel)
💡 Hinglish Explanation FTP ke active mode mein actual files transfer karne ke liye use hota hai. Saara file payload unencrypted plaintext mein flow hota hai, isliye network sniffer se files intercept ho sakti hain.
High Risk / Plaintext
PORT 21 TCP

FTP Control

File Transfer Protocol (Command Channel)
💡 Hinglish Explanation FTP connection establish aur user authenticate karne ke liye command port hai. Anonymous login ('anonymous:guest') misconfigurations aur plaintext credentials leak hona iska main risk hai.
Critical / Sniffable
PORT 22 TCP

SSH

Secure Shell
💡 Hinglish Explanation Linux servers ka encrypted secure remote management terminal hai. Telnet ka secure replacement hai, par weak passwords ya default SSH keys hone par brute-force attack se exploit ho jata hai.
Secure / Brute-force Target
PORT 23 TCP

Telnet

Teletype Network
💡 Hinglish Explanation Purana remote CLI login protocol jisme koi encryption nahi hoti. Network par chalte Wireshark packet sniffer se koi bhi live usernames aur passwords cleartext mein dekh sakta hai.
Critical / Obsolete
PORT 25 TCP

SMTP

Simple Mail Transfer Protocol
💡 Hinglish Explanation Mail servers ke beech unencrypted emails transmit karne ke liye use hota hai. Open Relay misconfigurations se spammers abuse karte hain aur VRFY/EXPN command se valid usernames enumerate ho jate hain.
High / Spam Relay
PORT 42 TCP / UDP

WINS

Windows Internet Name Service
💡 Hinglish Explanation Legacy Windows networks mein NetBIOS computer names ko IP addresses mein map karta hai. Purani machines mein name spoofing, poisoning aur Man-in-the-Middle attacks ke liye target banta hai.
Legacy Windows Service
PORT 43 TCP / UDP

WHOIS

Domain Registration Directory Query
💡 Hinglish Explanation Kisi bhi domain name ka registrar, owner, creation date aur contact details check karne ka query protocol hai. Reconnaissance phase mein passive footprinting ke liye fundamental tool hai.
Recon / OSINT Standard
PORT 53 TCP / UDP

DNS

Domain Name System
💡 Hinglish Explanation Domains (jaise google.com) ko machine IP address mein resolve karta hai. Hackers ispe DNS Spoofing, Cache Poisoning aur Zone Transfer (AXFR) chala kar saare internal subdomains dump karte hain.
Critical Infrastructure
PORT 67 UDP

DHCP Server

Dynamic Host Configuration (Server Port)
💡 Hinglish Explanation Local network par devices ko automatically IP addresses assign karta hai. Attacker rogue DHCP server banakar default gateway hijack kar leta hai aur poora traffic apne through route karwa leta hai.
High / Rogue DHCP Attack
PORT 68 UDP

DHCP Client

Dynamic Host Configuration (Client Port)
💡 Hinglish Explanation Client device is port par DHCP server se IP offer aur ACK packets receive karta hai. Attacker fake DHCP replies bhej kar target machine ka DNS poison kar sakta hai.
Client-side Network Port
PORT 69 UDP

TFTP

Trivial File Transfer Protocol
💡 Hinglish Explanation Super lightweight file transfer jisme na koi password hota hai na directory listing. Routers aur switches ke running configuration files aur firmware images download karne ke liye target hota hai.
Critical / No Auth
PORT 79 TCP

Finger

Finger User Information Protocol
💡 Hinglish Explanation Purana UNIX utility protocol jo logged-in users ka status deta hai. Attacker bina login kiye system ke saare valid username, home folders aur last login timing enumerate kar leta hai.
High / User Enumeration
PORT 80 TCP

HTTP

Hypertext Transfer Protocol
💡 Hinglish Explanation Standard unencrypted web server port (Apache, Nginx). Plaintext traffic hone se Man-in-the-Middle attack ho sakta hai, aur SQLi, XSS, CSRF, File Upload exploits ka sabse primary attack surface hai.
High Risk / Unencrypted
PORT 88 TCP / UDP

Kerberos

Ticket-Based Network Authentication
💡 Hinglish Explanation Windows Active Directory ka heart hai jo user authentication tickets (TGT, TGS) generate karta hai. Hackers ispe AS-REP Roasting, Kerberoasting aur Golden/Silver Ticket persistence attacks chalate hain.
Critical / AD Privilege Escalation
PORT 110 TCP

POP3

Post Office Protocol Version 3
💡 Hinglish Explanation Email client server se naye emails download karne ke liye use karta hai. Isme email contents aur passwords bina encryption ke travel karte hain, jisse sniffing karke poora mailbox leak ho sakta hai.
High / Plaintext Mail
PORT 143 TCP

IMAP

Internet Message Access Protocol
💡 Hinglish Explanation Modern mail synchronization protocol jo server par folders maintain karta hai. Agar STARTTLS enable na ho toh plain authentication credentials aur corporate emails network par leak ho jate hain.
High / Unencrypted Sync
PORT 161 UDP

SNMP

Simple Network Management Protocol
💡 Hinglish Explanation Routers, switches aur servers ke hardware status aur routing table monitor karta hai. Default community string ('public') se attacker poori internal network topology aur running services dump kar leta hai.
Critical / Recon Goldmine
PORT 389 TCP / UDP

LDAP

Lightweight Directory Access Protocol
💡 Hinglish Explanation Corporate Active Directory aur user directory query karne ke liye use hota hai. Anonymous bind allow hone par koi bhi bina authentication poori company ke employees, groups aur email list dump kar sakta hai.
High / AD Recon
PORT 443 TCP

HTTPS

HTTP Secure (SSL / TLS Encrypted)
💡 Hinglish Explanation SSL/TLS encrypted modern secure web browsing port hai. Data sniff nahi hota, par web applications ke andar ke flaws (Business Logic, SSRF, IDOR, SQLi) aur weak SSL ciphers testing ke targets hote hain.
Secure Transport / AppSec Target
PORT 445 TCP

SMB

Server Message Block (over IP)
💡 Hinglish Explanation Windows network mein file sharing, printer access aur RPC inter-process communication ka spine hai. EternalBlue (MS17-010) exploit isi par bana tha, aur SMB Relay attacks se poora domain hack ho sakta hai.
Critical / EternalBlue Target
PORT 465 TCP / UDP

SMTPS

Simple Mail Transfer Protocol over SSL
💡 Hinglish Explanation SSL/TLS encrypted email transmission channel hai. Plaintext eavesdropping se bachata hai, par underlying web applications mein SMTP header injection aur spoofing flaws exist kar sakte hain.
Encrypted Mail Sending
PORT 636 TCP

LDAPS

Lightweight Directory Access Protocol over TLS
💡 Hinglish Explanation Enterprise identity queries ko SSL/TLS encryption ke sath run karta hai. Man-in-the-middle sniffing se Active Directory credentials aur passwords ko securely protect karta hai.
Encrypted Identity Service
PORT 993 TCP

IMAPS

Internet Message Access Protocol over SSL
💡 Hinglish Explanation SSL/TLS encrypted email retrieval protocol hai jo modern clients (Outlook, Thunderbird) use karte hain. Network eavesdropping se corporate emails aur sensitive attachments ko encrypt karta hai.
Encrypted Mail Retrieval
PORT 995 TCP

POP3S

Post Office Protocol 3 over SSL
💡 Hinglish Explanation SSL/TLS encrypted version of POP3 hai jo unencrypted credential leaks ko rokta hai. Email server se machine par email download karte waqt packet interceptors ko cipher text dikhta hai.
Encrypted POP3
PORT 1194 UDP / TCP

OpenVPN

Virtual Private Network Gateway
💡 Hinglish Explanation Remote employees ko enterprise private network se connect karne ke liye encrypted tunnel banata hai. VPN server ke software version aur outdated authentication ciphers par attack focus hota hai.
Encrypted Tunnel
PORT 1433 TCP

MS SQL Server

Microsoft SQL Relational Database
💡 Hinglish Explanation Enterprise Windows environments ka relational database server hai. Default 'sa' password brute-force hone par hacker 'xp_cmdshell' stored procedure execute karke underlying Windows host pe SYSTEM shell le leta hai.
Critical / xp_cmdshell RCE
PORT 1521 TCP

Oracle DB

Oracle TNS Database Listener
💡 Hinglish Explanation Oracle Enterprise Database ka Transparent Network Substrate (TNS) port hai. SID enumeration tools (odat) se database names crack kiye jaate hain aur default SYS/SYSTEM accounts probe hote hain.
Critical / Enterprise DB
PORT 2049 TCP / UDP

NFS

Network File System
💡 Hinglish Explanation Linux servers ke beech remote filesystems ko local disk ki tarah mount karta hai. Agar 'no_root_squash' option enable ho toh attacker client machine se remote server par instant root privilege escalation kar leta hai.
Critical / Root Escalation
PORT 3306 TCP

MySQL

MySQL Database Server
💡 Hinglish Explanation Websites aur applications ka standard open-source relational database server hai. Public internet pe expose hone par weak passwords se connect karke user hashes aur sensitive credit cards dump ho sakte hain.
Critical / Data Breach
PORT 3389 TCP / UDP

RDP

Remote Desktop Protocol
💡 Hinglish Explanation Windows system ka graphical desktop remotely access karne ke liye use hota hai. BlueKeep (CVE-2019-0708) wormable exploit aur automated password spray attacks se ransomware drop karne ka main gate hai.
Critical / Ransomware Vector
PORT 5432 TCP

PostgreSQL

PostgreSQL Database System
💡 Hinglish Explanation High-performance enterprise open-source SQL database server hai. Default user 'postgres' agar misconfigured ho toh 'COPY ... FROM PROGRAM' command injection se server par remote code execution (RCE) ho jata hai.
Critical / SQL to Shell RCE
PORT 5900 TCP

VNC

Virtual Network Computing
💡 Hinglish Explanation Cross-platform graphical screen sharing aur remote control protocol hai. Agar bina authentication ya 8-character weak password ke configure ho toh attacker screen live dekh aur mouse control kar sakta hai.
High / Screen Hijack
PORT 6379 TCP

Redis

In-Memory Key-Value Data Store & Cache
💡 Hinglish Explanation Super-fast in-memory cache server jo session management aur speed badhane ke liye lagate hain. Default configuration mein bina password chalne par attacker root ki SSH key write karke direct box pwn kar leta hai.
Critical / Unauth SSH Key Write
PORT 8080 TCP

HTTP Alternate

Tomcat, Web Proxies & Admin Panels
💡 Hinglish Explanation Port 80 ka standard alternative jo Apache Tomcat, internal dashboards aur proxies ke liye use hota hai. Tomcat manager dashboard pe default credentials (tomcat:s3cret) se .WAR reverse shell upload hoti hai.
High / Tomcat WAR Upload
PORT 8443 TCP

HTTPS Alternate

Secondary Secure Web & Appliance Port
💡 Hinglish Explanation Firewall web interfaces, router login portals aur secure microservices ka alternative port hai. Admin dashboards bina MFA hone par ya SSL certificate misconfigurations se authentication bypass ho sakta hai.
Encrypted Admin Portal
PORT 27017 TCP

MongoDB

NoSQL Document Database
💡 Hinglish Explanation Modern JSON/BSON document database jo high-scale web apps use karti hain. Default install mein bina authentication ke chalne ki wajah se massive databases bina password leak aur delete/ransom ho chuki hain.
Critical / Open NoSQL Breaches