mirror of
https://github.com/athros/NESticle.git
synced 2025-04-02 10:52:50 -04:00
151 lines
No EOL
5.2 KiB
Text
Executable file
151 lines
No EOL
5.2 KiB
Text
Executable file
NetBIOS Security Kit
|
||
|
||
The intention of this package is to perform various security checks on
|
||
remote servers running NetBIOS file sharing services. This particular
|
||
package is for pre-release distribution only and is by no means suitable for
|
||
public use. We assume that our users at this point are other 'security
|
||
proffesionals'. As such there is precious little documentation with this
|
||
release.
|
||
|
||
Some things you will need to know.
|
||
|
||
- Netbios_check is fairly verbose. You may be well served to pipe the stdout
|
||
to both your screen and a file. The final release will have a shellscript
|
||
front end will allow you to do just this (perhaps with tee(1) ?>.
|
||
|
||
- Password grinding can take a while. Be patient, or launch multiple passes
|
||
at the same host. The final release will have this capability via a shell
|
||
script.
|
||
|
||
- If you feel the need to add more passwords to the grinding list, you have
|
||
to add them manually to client.c. The final revision will allow the end
|
||
user to supply their own list.
|
||
|
||
- Netbios_check when run will look something like the following. Please note
|
||
that explanations of the steps are denoted by [*] .
|
||
|
||
#./netbios_check
|
||
|
||
[*]--- Obtaining list of remote NetBIOS names
|
||
[*]--- Remote systems name tables:
|
||
|
||
INFIDEL
|
||
INFIDEL
|
||
SECNETNT
|
||
SECNETNT
|
||
SECNETNT
|
||
INFIDEL
|
||
BLAS
|
||
SECNETNT
|
||
SECNETNT
|
||
__MSBROWSE__
|
||
INFIDEL
|
||
|
||
[*]--- Attempting to connect with name: *
|
||
[*]--- Unable to connect
|
||
|
||
[*]--- Attempting to connect with name: INFIDEL
|
||
[*]--- CONNECTED with name: INFIDEL
|
||
[*]--- Attempting to connect with protocol: MICROSOFT NETWORKS 1.03
|
||
[*]--- Server time is Mon Feb 10 15:05:48 1997
|
||
[*]--- Timezone is UTC-7.0
|
||
[*]--- Remote server wants us to encrypt, telling it not to
|
||
|
||
[*]--- Attempting to connect with name: INFIDEL
|
||
[*]--- CONNECTED with name: INFIDEL
|
||
[*]--- Attempting to establish session
|
||
[*]--- Was not able to establish session with no password
|
||
[*]--- Attempting to connect with Username: `' Password: `ADMINISTRATOR'
|
||
[*]--- CONNECTED: Username: `' Password: `ADMINISTRATOR'
|
||
|
||
[*]--- Obtained server information:
|
||
|
||
Server=[INFIDEL] User=[] Workgroup=[SECNETNT] Domain=[]
|
||
|
||
[*]--- Obtained listing of shares:
|
||
|
||
Sharename Type Comment
|
||
--------- ---- -------
|
||
ADMIN$ Disk: Remote Admin
|
||
C$ Disk: Default share
|
||
CD Disk: CD-ROM
|
||
D$ Disk: Default share
|
||
IPC$ IPC: Remote IPC
|
||
NETLOGON Disk: Logon server share
|
||
OfficeJet Printer: HP OfficeJet
|
||
print$ Disk: Printer Drivers
|
||
temp Disk:
|
||
|
||
[*]--- This machine has a browse list:
|
||
|
||
Server Comment
|
||
--------- -------
|
||
INFIDEL
|
||
PHAZER Samba 1.9.15p8
|
||
TITUS p100 desktop
|
||
|
||
|
||
[*]--- Attempting to access share: \\INFIDEL\
|
||
[*]--- Unable to access
|
||
|
||
[*]--- Attempting to access share: \\INFIDEL\ADMIN$
|
||
[*]--- Unable to access
|
||
|
||
[*]--- Attempting to access share: \\INFIDEL\C$
|
||
[*]--- Unable to access
|
||
|
||
[*]--- Attempting to access share: \\INFIDEL\CD
|
||
[*]--- WARNING: Able to access share: \\INFIDEL\CD
|
||
[*]--- Checking write access in: \\INFIDEL\CD
|
||
[*]--- Attempting to exercise .. bug on: \\INFIDEL\CD
|
||
|
||
[*]--- Attempting to access share: \\INFIDEL\D$
|
||
[*]--- Unable to access
|
||
|
||
[*]--- Attempting to access share: \\INFIDEL\NETLOGON
|
||
[*]--- WARNING: Able to access share: \\INFIDEL\NETLOGON
|
||
[*]--- Checking write access in: \\INFIDEL\NETLOGON
|
||
[*]--- Attempting to exercise .. bug on: \\INFIDEL\NETLOGON
|
||
|
||
[*]--- Attempting to access share: \\INFIDEL\print$
|
||
[*]--- WARNING: Able to access share: \\INFIDEL\print$
|
||
[*]--- Checking write access in: \\INFIDEL\print$
|
||
[*]--- Attempting to exercise .. bug on: \\INFIDEL\print$
|
||
|
||
[*]--- Attempting to access share: \\INFIDEL\temp
|
||
[*]--- WARNING: Able to access share: \\INFIDEL\temp
|
||
[*]--- Checking write access in: \\INFIDEL\temp
|
||
[*]--- WARNING: Directory is writeable: \\INFIDEL\temp
|
||
[*]--- Attempting to exercise .. bug on: \\INFIDEL\temp
|
||
|
||
[*]--- Attempting to access share: \\INFIDEL\ROOT
|
||
[*]--- Unable to access
|
||
|
||
[*]--- Attempting to access share: \\INFIDEL\WINNT$
|
||
[*]--- Unable to access
|
||
|
||
|
||
This package is built on top of code written by Andrew Tridgell and contains
|
||
the following license agreement:
|
||
|
||
/*
|
||
Unix SMB/Netbios implementation.
|
||
Version 1.9.
|
||
Samba utility functions
|
||
Copyright (C) Andrew Tridgell 1992-1995
|
||
|
||
This program is free software; you can redistribute it and/or modify
|
||
it under the terms of the GNU General Public License as published by
|
||
the Free Software Foundation; either version 2 of the License, or
|
||
(at your option) any later version.
|
||
|
||
This program is distributed in the hope that it will be useful,
|
||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
GNU General Public License for more details.
|
||
|
||
You should have received a copy of the GNU General Public License
|
||
along with this program; if not, write to the Free Software
|
||
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
||
*/
|
||
|