> Does anyone know of a good, reliable list of well-known trojan ports that I > could put into Nessus? I have found several using Google, but they are all > different. I was looking for the best one.
It's a cheap trick but try this. Vendors, like Symantec, offer a service where they will scan your system for the common trojans (so they can sell you product -- which is good). This means they have identified a list of trojans for you. Not a "complete" list but a long one nonetheless. Go to http://www.symantec.com/avcenter/ and let them run a trojan scan against you. Save the results and pull out the port numbers. I went through the exercise a while ago and set up a csh alias that I use regularly as a quick check (it's a very long alias): trojans nmap -p31,41,...... !* | grep open We're all in this together ... I hope Symantec doesn't mind.
