Mirrors/hacktricks
2
0
Fork 0
mirror of https://github.com/carlospolop/hacktricks synced 2024-11-22 20:53:37 +00:00
Code Issues Projects Releases Packages Wiki Activity
hacktricks/network-services-pentesting/7-tcp-udp-pentesting-echo.md
carlospolop 63bd9641c0 f
2023-06-05 20:33:24 +02:00

3.9 KiB
Raw Blame History

Información Básica

Un servicio de eco está ejecutándose en este host. El servicio de eco fue diseñado para fines de prueba y medición y puede escuchar en los protocolos TCP y UDP. El servidor devuelve cualquier dato que recibe, sin modificación.
Es posible causar una denegación de servicio conectando un servicio de eco al servicio de eco en la misma o en otra máquina. Debido al número excesivamente alto de paquetes producidos, las máquinas afectadas pueden quedar efectivamente fuera de servicio.
Información de https://www.acunetix.com/vulnerabilities/web/echo-service-running/

Puerto predeterminado: 7/tcp/udp

PORT   STATE SERVICE
7/udp  open  echo
7/tcp  open  echo

Contactar el servicio Echo (UDP)

Description

The Echo service is a simple service that echoes back whatever data is sent to it. It is available on both TCP and UDP protocols. In this section, we will focus on the UDP version.

Usage

To contact the Echo service using UDP, we can use the nc command with the -u flag to specify the UDP protocol. For example:

$ echo "hello" | nc -u <target_ip> 7

This will send the string "hello" to the Echo service running on port 7 of the target IP address.

Potential issues

Since the Echo service simply echoes back whatever data is sent to it, it can be used to amplify UDP traffic in a reflection attack. This can result in a denial-of-service (DoS) attack on the target network.

Detection

To detect if the Echo service is running on a target system, we can use the nmap command with the -sU flag to specify UDP scanning. For example:

$ nmap -sU <target_ip>

This will scan the target IP address for open UDP ports, including port 7 if the Echo service is running.

Prevention

To prevent the Echo service from being used in a reflection attack, it is recommended to block incoming UDP traffic on port 7 at the network perimeter. Additionally, it is recommended to disable the Echo service if it is not needed.

nc -uvn <IP> 7
Hello echo    #This is wat you send
Hello echo    #This is the response

Shodan

  • port:7 echo

Referencias

Wikipedia echo

CA-1996-01 Ataque de denegación de servicio del puerto UDP

☁️ HackTricks Cloud ☁️ -🐦 Twitter 🐦 - 🎙️ Twitch 🎙️ - 🎥 Youtube 🎥