sec plus

yay:(

FTP

Port 20/21. File Transfer. Unsecure

SSH

Port 22. Secure remote login. Secure.

Telnet

Port 23. Remote Login. Unsecure

SMTP

Port 25. Send email. Unsecure- Pair with TLS

DNS

Port 53. Name Resolution.

DHCP

Port 67/68. Assign IP Addresses

TFTP

Port 69. Simple file transfer. Unsecure

HTTP

Port 80. Web traffic. Unsecure

POP3

Port 110. Retrieve Email. Unsecure

IMAP

Port 143. Retrieve email. Unsecure

SNPM

Port 161/162. Network Management. Only V3 secure.

LDAP

Port 389. Directory Services. Unsecure

HTTPS

Port 443. Secure web traffic

LDAPS

Port 636. Secure LDAP

RDP

Port 3389. Remote desktop. Only secure if properly config

Secure version of HTTP 80

HTTPS 443

Secure version of Telnet 23

SSH 22

Secure version of LDAP 389

LDAPS 636

Secure version of FTP 21

SFTP 22 OR FTPS 990/998

Email Ports: SMTP

25. Send mail

Email Ports: POP3

110. Download mail

Email Ports: IMAP

143. Sync mail

Symmetric Encryptions (fast)

AES better, Chacha 20

Asymmetric Encryption (pub/priv, dig sign, certs, key exchange)

RSA better, ECC

Hashing (integrity, not encrypt)

SHA256 better, SHA3

Password hashing:

bcrypt, Argon2, PBKDF2

Good Wireless:

WPA2/3, AES, CCMP

Bad Wireless:

WEP, WPA, TKIP

VPNS

IPsec, SSL/TLS VPN, L2TP, WireGuard

DNSSEC is good for digital signatures and integtrity but not…

….DNSSEC not good for encryption

DoH

DNS over HTTPS (encrypts DNS traffic)

DoT

DNS over TLS (encrypts DNS traffic)

SIEM

Security Information & Event Management (collects and correlates logs)

SOAR

Security Orchestration, Automation & Response (automates response)

EDR

Endpoint Detection & Response

XDR

Extended Detection & Response

NAC

Network Access Control

CASEB

Cloud Access Security Broker

UEBA

User and Entity Behavior Analytics