2KKUU7ita

Figure 11-10:
Using
LanGuard’s
share finder
to seek out
Windows
shares.
Testing
Chapter 11: Windows
Assessing your share permissions is a good way to get an overall view of who
can access what. This testing shows how vulnerable your network shares —
and sensitive information — can be. You can find shares with default permissions
and unnecessary access rights enabled. Trust me; they’re everywhere!
The best way to test for share weaknesses is to log in to the Windows system
via a standard local or domain user with no special privileges and run an enumeration
program so you can see who has access to what.
LanGuard has a built-in share finder tool for uncovering unprotected shares,
as shown in Figure 11-10.
The Everyone group has full share and file access to the LifeandHealth share
on the THINKPAD host. I see situations like this all the time where someone
shares their local drive so others can access it. The problem is they often
forget to remove the permissions and leave a gaping hole for a security
breach. I outline how to uncover sensitive information in unstructured files
on shares and other storage systems in Chapter 15.
215