28 Aug
For people who don’t know nuts about repairing own laptops, they’d have to fork out extra money just to get their Windows fixed or reinstalled. My friend could have been the good guy in placing a note in the shared folder to warn them about the danger of sharing but he had an evil sick and twisted mind instead.
So I am here to warn you about the danger of sharing folders on the network and I am going to show you how easy it is to scan the whole network, or even the whole Internet for shared folders.
If you didn’t know, sharing a folder on the Network is VERY easy. Just right click any folder or even your drive, select “Sharing and Security” and all it takes to share is by checking the “Share this folder on the network” checkbox. That leaves the folder open for everyone to access. Checking another box “Allow network users to change my files” lets anyone on the network to create and delete files in the shared folder.

Most common mistake that a lot of people make after sharing the folder to the network is forgotten to unshare it. Unchecking the checkboxes will unshare the folder. If you want to know what folders are being shared by you, use Computer Management to show you all your shared folders. Go to Control Panel -> Administrative Tools -> Computer Management and expand System Tools -> Shared Folders -> Shares.

The ADMIN$, C$, and IPC$ is shared by default. You do not need to worry about that.
Here are a few steps you can take to protect yourself from intruders in getting in your shared folders.
1. Unshare the shared folder after you’re done sharing the file to another person.
2. Use a money dollar sign $ at the end of the Share name to hide shared folders from being displayed publicly.

3. Use NetShareMonitor to notify you when someone is accessing your shared folders.
4. Use a “router” instead of direct connect to the Internet as it gives you a layer of protection against intruders. Works only at Home.
5. Do not use Simple File Sharing. Go to Control Panel -> Folder Options -> click the View tab, and uncheck “Use simple file sharing”.

6. Finally, a decent firewall can protect you from intruder.
Now I’ll show you how easy and fast it is for an intruder to scan for open shared folders in network or Internet. There are many types of security scanners but I am going to use a simple, small and fast tool called “Angry IP Scanner” to scan hundreds and thousands of computers for shared folders.
I downloaded the latest Angry IP Scanner and also the Windows Shares plugin. I ran a test scan on a range of IP addresses and found a few victims that has some folders being shared.
I simply use the Windows method of access another computer \\IP or \\HOSTNAME. In this case, I enter \\218.208.224.16 in Windows RUN and hit the OK button.

Within seconds, a window box appears displaying the shared folders. I can now access the victim shared My Documents folder and “maybe” even have the rights to change, add or delete files.

See how easy it is for an intruder to access your shared folders? Stop being a victim and start protecting yourself.
Technorati Tags: security, shares, sharing, scanner, angry ip scanner
: Copying this article to your website is strictly NOT allowed. However, if you like this article, you can use the HTML code below to directly link to this article.
Scanning for Connected Computers in Local Network and Finding Shared Folders How to remove My Sharing Folders in My Computer Easily Share Files with HTTP File Server MSN Messenger is dead, all hail Windows Live Messenger Connect Two or More Vista Computers Together using Wireless for Sharing Internet and Files Track Who Modified or Deleted Files in Your Shared Folder Search, Find and Locate Any Files on Local Area Network Shared Folders
Have computer technical problems? Get FREE help from Raymond.CC FORUM
22 Responses for "Dangers of Sharing Folders on the Network"
[...] So I am here to warn you about the danger of sharing folders on the network and I am going to show you how easy it is to scan the whole network, or even the whole Internet for shared folders. (more…) [...]
Hi,
Can you explain what simple file sharing means? Windows recommends it so r they wrong?
Windows recommends Simple File Sharing because it’s easy and no configuration needed. Basically anyone is able to share files without knowing Read/Write access rights.
This should *not* work on Windows XP. By default Windows Firewall prevents accessing NetBIOS ports (TCP/139, TCP/445, UDP/137 and UDP/138) from the Internet. Access is allowed only from subnet (LAN).
Next, some ISPs (mine included) prevents NetBIOS traffic on their internal routers and thus scanning for open shares is impossible.
If you scan for open shares on LAN (well Internet also, in case your ISP does not block NetBIOS traffic) and trying to connect to found share logon window will pop-up. You must actually enter username and password. Well, most of the times Administrator/{NULL} will work just fine…
Anyway, Raymond, can you please explain how did you connect to Windows XP machines *without* entering valid credentials? The only thing that comes to my mind is that ACLs for shares were set to Everyone. IIRC, this is default setting in Windows XP.
Not everyone has SP2 installed, hence firewall is not available. There are also people like me that never uses Windows Firewall.
I don’t think my ISP is blocking NetBIOS traffic because we all malaysians know that they are managed by a bunch of incapable so called engineers. There’s always massive downtime.
denial, I am not sure what version of Windows are the victims running but everytime I run a scan, there’s surely someone with open shares and I am able to access without entering login credentials.
One thing I know is if you disable Simple File Sharing, it will prompt to login before I can access a shared folder. As for Simple File Sharing, there’s no way I am able to configure access rights.
thank you very much Man
Okay, so i know now that i shouldn’t really share folders on my network anymore, but are there any possible legal dangers associated with scanning an ip range (your own isp’s range for example)?
of course if you dont intend to actually do anything with the security breach (if and once you have found one on another person’s computer), is there anything wrong with scanning?
@Somedude;
I dont think they is anythig wrong in scanning an ISP’s range if it was not stated in ther TOS.
@Rayomd;
Thank you very much; another informative 1..
U’re da Man!
Why is it always when i’m scanning for some IP range I can’t browse the net, chat etc (as if i’m not connected at all) ?
@blood;
That’s Weird, maybe ur Internet connection’s not so good and scanning for some IP range it’s eats up alot of bandwith.
Blood, that’s because all your threads are being used up by the scanner.
Ah I see…What is the meaning of thread btw ? I notice it in the scanner but don’t know what that means.
Oh and also…I was able to play some online game at that time.
I don’t understand about Windows Shares plugin…
May you explain that…
I didn’t see a shared..
Thank’s before…
So, it was your evil twin, huh?
Admit that it was you, I\’m glad that you are a good guy now.
anybody remember that program smbdie.exe. Great fun messing with my roommates in school. anyway yes turn this shit off.
@Jen, yeah my evil twin is dead. Heh.. Only the good one left.
@Ryan, yeap, I sure remember smbdie.exe. In fact I still have it with me. Nearly everyone has SP2 now and won’t be affected by this bug anymore.
Thanks for the information! Wait so are my drives like IPS$, ADMIN$, C$, and other drives I may have set to be on some default share?
I want someone to send me easy steps to follow to get into the local network which isn’t shared at all (printer + folders) I only recieve an internet connection through a hub. Is it possible to access there computers through a rat program or any program besides that because they have stolen passwords so now i want revenge
i came across your post after googling shared folders. i got a virus on my computer out of nowhere and i had to pay norton $100 to remotely access my computer to fix it. while scanning my computer they found that i had the box checked to give access to my computer via a shared folder. they asked if i wanted this- but i had no idea what it was- so they took it off. but today i just got onto my boyfriend’s computer to find a picture of us and i found that he had a shared file folder titled with my name. i have no idea how this was there- but i am beginning to suspect that he got into my computer and gave himself access to my stuff. is this possible? and if so- based on your article above it seems that the reason my computer got a virus could likely be because of this shared folder that was created. can you verify if this is actually a possibility? i have been having issues of trust with my boyfriend as of late- he read my email and looked into my phone- so this would not be surprising. please let me know if this actually possible for him to do. are shared file folders created by people to snoop on others? thank you for your help.
hi how do i install the windows shares plugin i try to access a folder on someone elses pc it says you dont have permission
So, how would someone get past the shared folder? When I was using XP I always had a shared folder, but it only contained files that I wanted to share. Copies of files at that.
Do you consider a password protected shared folder safe? How about without simple file sharing, and with restrictions set on the secruity tab?
Leave a reply