
YuChakTinMichael‘sGIACGCFWProjectAssignment
Page 146
NetBrute
“NetBruteallowsyoutoscanasinglecomputerormultipleIPaddressesfor
availableWindowsFile&PrintSharingresources.Thisisprobably oneofthemost
dangerousandeasilyexploitablesecurityholes.Itiscommonforyournoviceusersto
havetheirprintersortheirentireharddrivesharedwithoutbeingawareofit.This
utilitywillhelpyoutofindtheseresources,soyoucansecurethemwithafirewallor
byinformingyourusershowtoproperlyconfiguretheirshareswithtightersecurity.”
(fromwww.rawlogic.com
40
)
“Exposedshares”areproblemsmostlikelyfound“internally”(asresourcesharingis
exercisedonadailybasisby theLANclientsandservers). Althoughthepublic
serviceserversdonotneedtoprovideanyresourcesharingfacility,careless
configurationontheseserverscanmakeexposedsharespossible.
ShareScanner
“ShareScannerisagraphicalutilitythatwillallowyoutoviewsharesonaremote
machine.ShareScanneruseswindowsnetworkingtoviewtheseshares(whichis
unfortunatelyextremelyslow),soitisbesttosetyourtimeoutto0sothatittakesas
longasitmusttofindoutthisinformation.” (fromwww.mikersoft.com
41
)
SameasNetBrute,ShareScannerisusedfordetectingMicrosoftnetworkingshares.
SubNet2.0
“SubNet2.0isatrojanhorseportscanner.Agoodprogramtoanalyzeyourinternet
connectionoranyothermachinesonyournetworkforover150backdoorattacks.At
afastscanningspeedoflessthan 20secondsyouwillbeabletoscanyourselfbefore
anattackergetsachancetoconnecttoyourcomputer.”(fromwww.subseven.com
42
)
40
http://www.rawlogic.com/products.html
41
http://www.mikersoft.com/ant/ant_help_shares.html
42
http://www.subseven.com/freeware.shtml
Comentarios a estos manuales