Complete list of Web and Database Ports

 

Most of the time, while working with hacks on web application bind up with some databases, a open port is a stucking point and forces us to carry out a port scan. 

However port scan is undoubtedly best option, but what if some IDS has been implemented on the remote system? We are gonna put ourselves into monitoring even before starting the attack. So why do this shit?

Why not check the port numbers along with their server type and better give it a try on the basis of default ports as most of the Administrators uses the default ports only.

Here i am listing the ports used on all the popular Web and Database servers which you might need to refer while doing some audit.

 

Port	Server
66	Oracle SQL*Net
80	Hyper Text Transfer Protocol (HTTP)
81	HTTP Proxy, Alternative HTTP Port, Cobalt Server Administration Port
443	Secure Socket Layer (SSL)
445	Microsoft SQL Server over NetBIOS
457	UnixWare/Netscape FastTrack Server
1080	SOCKS Proxy
1100	Oracle WebCache Listener
1241	KaZaA File Sharing Server (HTTP-like protocol)
1352	Lotus Domino (Notes)
1433	Microsoft SQL Server 2000
1434	Microsoft SQL Server over TCP/IP Redirector
1521–1530	Oracle
1944	Microsoft SQL Server 7
2301	Compaq Insight Manager, Compaq Survey Utility
3128	HTTP Proxy (Squid, NetCache, etc.)
3306	mySQL
4000	Oracle WebCache Listener
4001	Oracle WebCache Listener
4002	Oracle WebCache Listener
4100	Sybase 11.0 (jConnect)
5000	Sybase 12.x
5432	PostgreSQL
5800	VNC HTTP Console Port #1
5801	VNC HTTP Console Port #2
5802	VNC HTTP Console Port #3
6346	Gnutella (HTTP-like protocol)
6347	Gnutella (HTTP-like protocol)
7001	BEA WebLogic
7002	BEA WebLogic
8000	HTTP Proxy, Alternative HTTP Port, HP Web JetAdmin Version 6.0
8001	BEA WebLogic
Port	Server
8005	Apache Tomcat Administration Server (non-HTTP protocol)
8080	HTTP Proxy, Alternative HTTP Port
8888	HTTP Proxy, Alternative HTTP Port
30821	Netscape Enterprise Server Administration Server

If you know any other ports, please do add them as comment. :)