kecoak
asked on
Step to find out about server information,
http://www.theiia.org/ITAudit/index.cfm?act=itaudit.archive&fid=5622
"
To make a manual anonymous connection, users need to run the following command from a command prompt:
Net use \\<server ip address>\ipc$ /u:"" ""
In this example, the user includes the server's Internet protocol address in the command (e.g., 10.10.10.10). The /u switch denotes the user account that is being employed to authenticate to the server — a null user account in this case or anonymous user connection.
After the anonymous connection is established, the user can access various security configurations on that server. The information that an attacker connecting as the anonymous user gathers is typically used in conjunction with other tools or attack methods. Such information includes:
* Lists of computer users, including those in the Active Directory.
* Lists of groups from the computer, including the Active Directory.
* Security identifiers (SIDs) for user accounts.
* User accounts for SIDs.
* List of shared folders.
* Account policies.
* NetBIOS name.
* Domain name with which the computer is associated.
* List of trusted domains.
"
I do understand you can see all the shared folders after you execute the command above( Net use \\<server ip address>\ipc$ /u:"" "" ). By going to that computer on you my computer //servername
But I don't understand how you can get the list of computer users using anonymous connection.
Can someone give me a demo?
"
To make a manual anonymous connection, users need to run the following command from a command prompt:
Net use \\<server ip address>\ipc$ /u:"" ""
In this example, the user includes the server's Internet protocol address in the command (e.g., 10.10.10.10). The /u switch denotes the user account that is being employed to authenticate to the server — a null user account in this case or anonymous user connection.
After the anonymous connection is established, the user can access various security configurations on that server. The information that an attacker connecting as the anonymous user gathers is typically used in conjunction with other tools or attack methods. Such information includes:
* Lists of computer users, including those in the Active Directory.
* Lists of groups from the computer, including the Active Directory.
* Security identifiers (SIDs) for user accounts.
* User accounts for SIDs.
* List of shared folders.
* Account policies.
* NetBIOS name.
* Domain name with which the computer is associated.
* List of trusted domains.
"
I do understand you can see all the shared folders after you execute the command above( Net use \\<server ip address>\ipc$ /u:"" "" ). By going to that computer on you my computer //servername
But I don't understand how you can get the list of computer users using anonymous connection.
Can someone give me a demo?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.