How a Default iPhone 1.1.3 Looks to Nmap 3.50
By Daniel Miessler on January 25th, 2008: Tagged as Apple | Information Security | OS X | Security | iPhone
This is an nmap (3.50) scan of all 65,535 TCP ports on a default, non-hacked 1.1.3 iPhone. The scan was performed from an OS X system (MacPorts) sitting adjacent to the iPhone on a wireless network.
It appears there’s just one tcpwrapped service, on port 62,078, and Fyodor has evidently already added the requisite fingerprints since nmap’s OS detection pegged it perfectly as an iPhone.
kairin ~ $ sudo nmap -p 1-65535 -sV -O 10.10.126.2
Starting Nmap 4.50 ( http://insecure.org ) at 2008-01-24 20:50 PST Interesting ports on 10.10.126.2: Not shown: 65534 closed ports PORT STATE SERVICE VERSION 62078/tcp open tcpwrapped MAC Address: 00:1C:B3:70:6A:DA (Apple) Device type: phone|media device Running: Apple embedded OS details: Apple iPhone mobile phone or iPod Touch (Darwin 9.0.0d1)
--
That’s pretty cool! If I had the money, I think I would still like to get an iPhone just for the geek factor and to tinker with. However, I just don’t need all that it has to offer you know? Plus I’m a cheap skate!
More iPhone hacking in the future for you?
Comment by Jonathan S. — 1/25/2008 @ 3:34 am