← Port Encyclopedia
464
Kerberos-Change
TCP/UDP
Authentication High Risk
Kerberos password change — Active Directory password operations

🔍 How to Scan Port 464

nmap -sV -p 464 target
nmap -sV -sC --script=banner -p 464 target
nc -zv target 464

🛡️ Security Considerations

  • Scan port 464 with nmap -sV to identify the exact service and version
  • If Kerberos-Change is not needed, close or firewall this port immediately
  • Check for default credentials if a management interface runs on this port
  • Use searchsploit kerberos-change to find known exploits
  • Monitor traffic on port 464 with Wireshark or tcpdump for anomalies
  • Ensure the service is patched to the latest version to prevent known CVE exploitation