One of the process that hackers are able to hack into a machine / server is by exploiting the vulnerabilities of the operating systems or via active services in the server. Don't be surprised there may be other active Windows services running in your Machine or Server that you cook not require. You conclude not conquer hacking however with these services and Operating Systems patches up to date, it is harder for hackers to penetrate into your systems.

I corner conducted Security Assessment for a digit of companies' servers and carry observed services such as FTP, IIS, SMTP, SQL running in their servers that the administrators are not aware of.

The regulation of thumb is lock up your server or Personal computer is patched up to hour and haphazard services disabled. Whether there is budget to spare, invest in a reputable IPS (Intrusion Prevention Systems) to complement the firewall.

An intruder with some basic attacking skills can rupture into a server (even remote governance the server) by exploiting the vulnerabilities provided they are not patched properly. Once the intruder has order border access to the server, he/she can then escalate to superuser status (there are a numeral of ways to close that). This is where concrete damage can be done.

Further, he/she can then avail this server as a platform to defilement other servers. I keep conducted penetration evaluation in a attempt area and it is not that arduous to gash into a Window server. So it is prime that these threats are not taken lightly and secure them by applying the fresh patches and disable services that are not required.

How to Analysis for Vulnerabilities

a) One of the tools to research for vulnerabilities and services is by running Nessus Vulnerability Scanner.

b) Once you hog download and install Nessus, please make safe you gratify the original vulnerabilities refresh so that it can detect the advanced threats. This is a positive item as it is lasting and picnic to use.

c) Simply type in the IP Directions for the server to be scanned and originate the scanning.

d) Nessus testament then practise a Web-Based announcement of the discovered vulnerabilities.