what to do after open port

[Razak]

hi, i am razak, and i have been practicing pen testing on my xp px.
And i found a few open port. But i looked at it, there was no ftp,ssh.
So i can't remotely connect to that pc.
So i just want to ask if any one could tell and help me what to do after if i found a open port, and what to do if there were no ftp or ssh port open.
???

[imported_Deathray]

Depends on what your goal is?
To view a website?
Or are you talking about root'ing your xp... If so you could..
find out what and if possible, what version, is listening on the port.
Then you check to see if there are any appropriate public exploits, if not.
You find one yourself or think it over and consider approaching differently.

[thorin]

Invest in some books or spend some time working on your google'fu. If you don't what what's next then you're not "practicing pen testing". If you believe ftp and ssh are the only way to connect to a system then you're not "practicing pen testing". While it may seem fun to jump in with both feet you won't get very far. As you've discovered. Take the time to do some research and you'll have a lot more fun and progress in a much more effective manner.

[theprez98]

Open port --> Service associated with that port --> vulnerability in specific version of that service --> Exploit to take advantage of that vulnerability --> pwn the box. ;-)

I can imagine this thread going nowhere fast...

[imported___CG__]

And i found a few open port. But i looked at it, there was no ftp,ssh.

so what was it? help us help you.

So i can't remotely connect to that pc.

probably not. XP offers no "remotely connect-able" services like telnet/ssh by default

So i just want to ask if any one could tell and help me what to do after if i found a open port, and what to do if there were no ftp or ssh port open.
???

like theprez98 said, now its time to enumerate whats running on that port, determine what version that service is then see if there is a vulnerability and/or exploit code for that vulnerability.

use the version scan (-sV) with nmap to get you started identifying whats listening on that/those open ports.