I am performing a network vulnerability scan of an Android Automotive platform. My setup consists of a Kali Linux machine and an Android Automotive Infotainment System on a local network.
During the scanning, I found that port 5151
is open and is being used by a service named esri_sde
.
kali:~$ sudo nmap -T4 -p- 192.168.x.x //IP for infotainment system
Nmap scan report for 192.168.x.x
PORT STATE SERVICE
5151/tcp open esri_sde
Doing a netcat
on the port 5151
for listening, provides me continuous data which is not human readable.
kali:~$ nc 192.168.x.x 5151
7ò”°R YJøOæÝ½9^çÆC€E†éúaI™íÐåY—
...
I am not familiar with ESRI SDE or related services. Can anyone tell me how I can read this data on my Kali Machine. For eg. saving it to a file and reading it via some editor, or having some kind of SDE client on my Linux machine that can read the data being produced on port 5151
.
android-10.0.0_r20
. My first guess is that Android Auto is still using this service, or masking a newer version with old informationesri_sde
? Like is it responding as esri_sde, or has Kali just found port 5151 and via some baked in logic it says 5151 is esri_sde -- meaning Kali might be assuming what's on 5151 is incorrect.