// REFERENCE
Port 5985 (WinRM HTTP)
Protocol: TCP
Service: WinRM
High risk
WinRM (Windows remote management) unencrypted. The base of PowerShell Remoting and tools like evil-winrm; exposed it's a direct remote-execution vector. Restrict it to the management network.
Related tools
Work with this in:
Related
22
Port 22 (SSH) 23
Port 23 (Telnet) 1194
Port 1194 (OpenVPN) 1723
Port 1723 (PPTP VPN) 2222
Port 2222 (alternate SSH) 3389
Port 3389 (RDP)
Port 22 (SSH) 23
Port 23 (Telnet) 1194
Port 1194 (OpenVPN) 1723
Port 1723 (PPTP VPN) 2222
Port 2222 (alternate SSH) 3389
Port 3389 (RDP)
Assignments per the IANA port registry. Educational content.