windows share= no pass/ no access?

hattrick · 07-09-2008, 11:52 AM

Tried sqeezing as much info into the title as possible, but this is my scenario:

I'm doing a pentest on a network for a client,
and they all have Windows Xp pro machines.
they don't have ANY passwords to log onto their machines, and no other users besides "Administrator"

so does that mean I'll never be able to log on to their computers, or able to view their files?

kind of the same way I cant use mstsc without the user having a password?

MS3FGX · 07-09-2008, 04:53 PM

It has been awhile since I dealt with an XP machine, but I am almost positive you can mount a SMB share when the user has no password. Unless it is different with Administrator shares?

original_jamingrit · 07-10-2008, 01:45 AM

Code:

mount -t smbfs -o username=Whatever,password= //HOST/SHARE /mnt/point

Code:

mount -t smbfs -o username=guest,password= //HOST/SHARE /mnt/point

try these; with the null password as shown. If they're just like normal windows shares, also try replacing 'Whatever' with 'guest'. Although I'm not sure if this is strictly speaking the proper way to do it, it works when I connect to my buddy's xp pro machine.

thefamousnomo · 07-10-2008, 06:01 AM

if simple file sharing is enabled on the xp machine, and the guest account is active (this is crucial) you should be able to mount windows shares without any additional info...

am not as yet up on smbclient commands but works using ubuntu 'connect to server' supplying only server ip if this helps