Port Listing and MMC commands (Windows)

[Pic0o]

Bonus Port and Service info by command.

 

Thanks to Vas.com for this syntax, you can get what ports are running and what those services and applications are.

netstat -a -n -b -p TCP

Running an Nmap will likely show the ports 49152 - 49159 running on a Windows system. On your scan (with -A scanning option) they will list as [Version]Microsoft Windows RPC and a [service]msrpc. The details on what is actually running on these ports, is provided via the above netstat command.

 

As described in the above link, these are Event Log and other remote services & domain related items. As with most all of the .MMC options, you can execute them to load remote servers. I do this often in administration.

compmgmt.msc /computer:"IP or MachineName"

Chain these in a batch file if you have multiple machines to audit. Closing the MMC will open the next one in your batch list. For a list of .mmc objects you can invoke by command line, this list should do you justice.

[Pic0o]

Do not hesitate to use the "Color ##" commands for batch scripts. Colors are very nice for knowing what one of your maintenance scripts are running :)