Skip to content

Commit 36c688b

Browse files
author
Jake Smith
authored
Change Metasploit Alert port from 444 to 4444
Metasploit's default port is 4444 as noted in numerous blogs such as this one: https://blog.rapid7.com/2012/06/01/metasploit-exploit-failed-how-to-test-if-metasploit-is-working/
1 parent 046c4a0 commit 36c688b

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

sysmonconfig-export.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -331,7 +331,7 @@
331331
<DestinationPort name="RDP" condition="is">3389</DestinationPort> <!--Windows:RDP: Monitor admin connections-->
332332
<DestinationPort name="VNC" condition="is">5800</DestinationPort> <!--VNC protocol: Monitor admin connections, often insecure, using hard-coded admin password-->
333333
<DestinationPort name="VNC" condition="is">5900</DestinationPort> <!--VNC protocol Monitor admin connections, often insecure, using hard-coded admin password-->
334-
<DestinationPort name="Alert,Metasploit" condition="is">444</DestinationPort>
334+
<DestinationPort name="Alert,Metasploit" condition="is">4444</DestinationPort>
335335
<!--Ports: Proxy-->
336336
<DestinationPort name="Proxy" condition="is">1080</DestinationPort> <!--Socks proxy port | Credit @ion-storm-->
337337
<DestinationPort name="Proxy" condition="is">3128</DestinationPort> <!--Socks proxy port | Credit @ion-storm-->

0 commit comments

Comments
 (0)