QuestionQ66

VerifiedDatabase Penetration Testing Methodology

Frank is a senior security analyst at Roger Data Systems Inc. The company asked him to conduct a database penetration test on its client network to determine whether the database is vulnerable to attacks. The client did not disclose any information about the database in use.

As a pen tester, Frank knows that each database runs on its own default port. He therefore began database port scanning with the Nmap tool and tried different commands using default port numbers, succeeding with the following command:

nmap -sU `"p 1521 <client ip-address>  

Which database does the company use?

Explanation

Oracle Net Services Listener uses port 1521 as its default listening port for client database connections.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!