qwertyuiopasdfghjklzxcvbnmq wertyuiopasdfghjklzxcvbnmqw ertyuiopasdfghjklzxcvbnmqwer tyuiopasdfghjklzxcvbnmqwerty uiopasdfghjklzxcvbnmqwertyui

Transcripción

1 qwertyuiopasdfghjklzxcvbnmq wertyuiopasdfghjklzxcvbnmqw ertyuiopasdfghjklzxcvbnmqwer tyuiopasdfghjklzxcvbnmqwerty Seguridad y Alta Disponibilidad uiopasdfghjklzxcvbnmqwertyui Practica: Disponibilidad opasdfghjklzxcvbnmqwertyuiop Jesús García del Rio asdfghjklzxcvbnmqwertyuiopas dfghjklzxcvbnmqwertyuiopasdf ghjklzxcvbnmqwertyuiopasdfgh jklzxcvbnmqwertyuiopasdfghjkl zxcvbnmqwertyuiopasdfghjklzx cvbnmqwertyuiopasdfghjklzxcv bnmqwertyuiopasdfghjklzxcvbn mqwertyuiopasdfghjklzxcvbnm qwertyuiopasdfghjklzxcvbnmq wertyuiopasdfghjklzxcvbnmqw ertyuiopasdfghjklzxcvbnmrtyui

2 PRACTICA NMAP - Comando para conocer el estado de los puertos de nuestro equipo. nmap -ss O <ip de nuestro equipo> Ejemplo en nuestro caso sería en el cmd introducir la siguiente línea: nmap -ss O y nos mostraría el resultado de nuestros puertos,como se muestra en la siguiente imagen: - Comando para conocer el estado de los puertos que deseemos de los equipos de nuestra red: nmap -sv -p <puertos> <rango de ips de los equipos> En nuestro caso lo haríamos de la siguiente manera queriendo conocer los puertos 20,21,80,110,143, y el rango de ips que queremos analizar sería saliendo como resultado lo que se muestra en la siguiente pantalla, ejecutando el comando: nmap -sv -p 20,21,80,110,

3 - Comando para conocer los equipos que están conectados en nuestra red, el comando sería el siguiente: Nmap sp <rango de ips> En nuestro caso introduciríamos el comando de la siguiente manera queriendo analizar el rango de ips , quedando el comando de la siguiente manera: Nmap sp

4

5 MICROSOFT BASELINE SECURITY ANALYZER PARA QUE SIRVE EL MICROSOFT BASELINE SECURITY ANALYZER? Microsoft Baseline Security Analyzer (MBSA) es una herramienta fácil de usar diseñada para los profesionales de TI que ayuda a las pequeñas y medianas empresas a determinar su estado de seguridad según las recomendaciones de seguridad de Microsoft y ofrece orientación de soluciones específicas. Mejore el proceso de administración de seguridad utilizando MBSA para detectar los errores más comunes de configuración de seguridad y actualizaciones de seguridad que falten en sus sistemas informáticos. Este programa nos lo podemos bajar desde la propia pagina de Microsoft nosotros nos lo hemos descargado de ahí mismo. Una vez descargado lo ejecutamos y nos encontramos con la siguiente pantalla. Y le damos a seleccionar a scan a computar solo queremos escanear un ordenador si quisiéramos más seria scan multiple computers.

6 En la siguiente pantalla observamos que tenemos dos opciones, o poner el nombre del equipo que queremos analizar o también se puede hacer poniendo una ip de alguien equipo que este en nuestra misma red. En esta pantalla podemos observar que empieza el escaneo de lo que hemos seleccionado.

7 Una vez terminado el analisis nos sale en la pantalla que si queremos ver todos los resultados y nos lo muestra en un recuadro poniendonos toda la información.,(no pongo pantallazo porque copio todo la informacion que me pone). Security assessment: Severe Risk (One or more critical checks failed.) Computer name: IP address: Security report name: WORKGROUP\ALUMNO03-PC Scan date: 13/10/ :19 Catalog synchronization date: Security update catalog: Security Updates WORKGROUP - ALUMNO03-PC ( ) Microsoft Update Score Issue Office Security Updates Result 1 service packs or update rollups are missing. Update Rollups and Service Packs Score ID Description Missing Current Update Compliance Score ID Description Service Pack 1 for Microsoft Office 2010 (KB ) 32-bit Installed MS Security Update for Microsoft PowerPoint 2010 (KB ), 32- Bit Installed MS Security Update for Microsoft Office 2010 (KB ), 32-Bit Installed MS Security Update for Maximum Severity

8 Microsoft Publisher 2010 (KB ), 32-Bit Installed MS Security Update for Microsoft Office 2010 (KB ), 32-Bit Installed MS Security Update for Microsoft SharePoint Workspace 2010 (KB ), 32-Bit Installed MS Security Update for Microsoft Office 2010 (KB ), 32-Bit Installed MS Security Update for Microsoft Office 2010 (KB ), 32-Bit Installed MS Security Update for Microsoft Excel 2010 (KB ), 32-Bit Installed MS Security Update for Microsoft Word 2010 (KB ), 32-Bit Installed MS Security Update for Microsoft InfoPath 2010 (KB ), 32-Bit Windows Security Updates 1 service packs or update rollups are missing. Update Rollups and Service Packs Score ID Description Missing Windows 7 Service Pack 1 for x64- based Systems (KB976932) Current Update Compliance Score ID Description Installed MS Security Update for Systems (KB ) Installed MS Security Update for Maximum Severity Moderate

9 Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB974571) Installed MS Security Update for Systems (KB ) Installed Update for Windows 7 for x64-based Systems (KB980408) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Moderate Moderate

10 Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Cumulative Security Update for Internet Explorer 9 for Windows 7 for x64-based Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB975560) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Microsoft.NET Framework on Windows 7 and Windows Server 2008 R2 for x64- based Systems (KB ) Installed MS Security Update for Microsoft.NET Framework 3.5.1, Windows 7, and Windows Server 2008 R2 for x64- based Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Security Update for.net Framework on Windows 7 and Windows Server 2008 R2 for x64- based Systems (KB ) Installed MS Security Update for Moderate

11 Systems (KB982665) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB982799) Installed MS Security Update for Systems (KB ) Installed Update for Windows 7 for x64-based Systems (KB977074) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB ) Installed Update Rollup for ActiveX Killbits for Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Cumulative Security Update for ActiveX Killbits for Windows 7 for x64-based Systems (KB ) Installed MS Security Update for Systems (KB ) Installed MS Microsoft.NET Framework 3.5 SP1 Security Update for Windows 7 and Windows Server 2008 R2 for x64-

12 based Systems (KB979916) Installed MS Security Update for Systems (KB972270) Installed MS Security Update for Systems (KB978542) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB975467) Installed Update for Windows 7 for x64-based Systems (KB974431) Installed MS Security Update for Systems (KB ) Installed Windows Malicious Software Removal Tool x64 - October 2011 (KB890830) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB979688) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB979687) Installed MS Security Update for Systems (KB982132) Installed MS Security Update for Systems (KB ) Installed Windows Internet Explorer 9 for Windows 7 for x64-based Systems Low

13 Installed MS Security Update for Systems (KB ) Installed MS Security Update for Systems (KB979482) Installed MS Security Update for Systems (KB ) Installed MS Security Update for Microsoft.NET Framework on Windows 7 and Windows Server 2008 R2 for x64- based Systems (KB ) Installed MS Security Update for Systems (KB ) Installed Update for Windows 7 for x64-based Systems (KB ) Installed MS Security Update for Systems (KB979309) Installed MS Security Update for Systems (KB978601) Developer No security updates are missing. Tools, Runtimes, and Current Update Compliance Redistributables Score ID Description Security Updates Installed MS Security Update for Microsoft Visual C Service Pack 1 Redistributable Package (KB ) Maximum Severity SQL Server Security Updates No security updates are missing. Current Update Compliance Score ID Description Installed MS MSXML 6.0 RTM Security Update (925673) Maximum Severity

14 Silverlight Security Updates No security updates are missing. Current Update Compliance Score ID Description Installed MS Security Update for Microsoft Silverlight (KB ) Maximum Severity Windows Scan Results Administrative Vulnerabilities Score Issue Result Windows Firewall Local Account Password Test Password Expiration Incomplete Updates Windows Firewall tests cannot be done due to an error. (0x ) Some user accounts (3 of 5) have blank or simple passwords, or could not be analyzed. Weak Locked Disabled User Password Out Administrador Weak - Disabled Invitado Weak - Disabled jesus Weak - - HomeGroupUse r$ vmware_user Some user accounts (4 of 5) have non-expiring passwords. User Administrador HomeGroupUser$ Invitado jesus No incomplete software update installations were found. File System All hard drives (1) are using the NTFS file system. Drive Letter File System C: NTFS

15 Guest Account The Guest account is disabled on this computer. Autologon Autologon is not configured on this computer. Restrict Anonymous Computer is properly restricting anonymous access. Administrato rs No more than 2 Administrators were found on this computer. User Administrador jesus Automatic Updates Updates are automatically downloaded and installed on this computer. Additional System Information Score Issue Result Windo ws Version Computer is running Microsoft Windows 7. Auditin g Shares Neither Logon Success nor Logon Failure auditing are enabled. Enable auditing and turn on auditing for specific events such as logon and logoff. Be sure to monitor your event log to watch for unauthorized access. 3 share(s) are present on your computer. Share Directory Share ACL Directory ACL ADMIN $ C:\Windo ws Admin Share NT SERVICE\TrustedInsta ller - F, NT AUTHORITY\SYSTE M - RWXD, BUILTIN\Administrad ores - RWXD, BUILTIN\Usuarios - RX C$ C:\ Admin Share BUILTIN\Administrad ores - F, NT AUTHORITY\SYSTE

16 Users C:\Users Administrador es - F, Todos - F M - F, BUILTIN\Usuarios - RX, NT AUTHORITY\Usuario s autentificados - D NT AUTHORITY\SYSTE M - F, BUILTIN\Administrad ores - F, BUILTIN\Usuarios - RX, Todos - RX Service s No potentially unnecessary services were found. Internet Information Services (IIS) Scan Results Score Issue Result IIS Status IIS is not running on this computer. SQL Server Scan Results Score Issue Result SQL Server/MSDE Status SQL Server and/or MSDE is not installed on this computer. Desktop Application Scan Results Administrative Vulnerabilities Score Issue IE Zones Macro Security Result Internet Explorer zones have secure settings for all users. No supported Microsoft Office products are installed.