Discussion Locked

Windows Network security threat

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

One of my technicians got his hands on the program "Net Browser" V2.1 (http://lantools.narod.ru)
which basically allows anyone using this tool to have full access to any system, whether or not the system contains any shared files.

How can this be prevented using Win2K servers?

2 replies

by lordinfidel

First, it's not a magic tool. Someone can't just start the tool up and hack your system, there would need to be some flaws in your present security to allow it.

1st, you would need to allow smb thru your firewall.

2nd, you will have to have avalid account in the domain you are trying to attack.

The reason you are able to view stuff on your local lan is A) there is no firewall between you and your local servers, B) you have a valid account in the domain.

For a test, try loading it up on a system that is not logged into with a domain account.

Or try specifying a remote IP in the address bar. Try it against a web server that is behind a webserver and see what you get.

If you throw a pcket anylyzer on the connection you will see that all it is doing is trying to connect via smb.

Get Hacking Exposed Windows 2000 and you will see how to prevent your systems from these sort of attacks.

by mckinntg

are all patches applied to server? and the first response is also correct to a point. check open services and ports close any not needed. also check out the tool "bruteforce" it is a decent basic vulnerability tester.

This discussion is closed to new replies.