Donation Goal
Donate Now Goal amount for this year: 799 USD, Received: 100 USD (13%)
Please donate to help support this website. The funds will be used to purchase owned license of LiteSpeed Web Server Enterprise (2-CPU). It provides superior performance in terms of raw speed, scalability and anti-DDoS capabilities.

Dangers of Sharing Folders on the Network

Posted By Raymond In Category: Computer

Aug
28
2007

How to hack shared foldersHere’s something I want to share with all of you. If I am not wrong, about 4-5 years ago, I’ve got a friend telling me how much fun he had by scanning the whole college network for shared folders. He was able to discover so many important files and also did many bad things by deleting important files from My Documents and also destroying Windows by deleting Windows system files. I was totally against that because who knows that the poor guy/girl spent many weeks to complete an assignment and was about to hand over to the lecturer but found out that it’s GONE!

For people who don’t know nuts about repairing own laptops, they’d have to fork out extra money just to get their Windows fixed or reinstalled. My friend could have been the good guy in placing a note in the shared folder to warn them about the danger of sharing but he had an evil sick and twisted mind instead.

So I am here to warn you about the danger of sharing folders on the network and I am going to show you how easy it is to scan the whole network, or even the whole Internet for shared folders.


If you didn’t know, sharing a folder on the Network is VERY easy. Just right click any folder or even your drive, select “Sharing and Security” and all it takes to share is by checking the “Share this folder on the network” checkbox. That leaves the folder open for everyone to access. Checking another box “Allow network users to change my files” lets anyone on the network to create and delete files in the shared folder.
How to share windows files

Most common mistake that a lot of people make after sharing the folder to the network is forgotten to unshare it. Unchecking the checkboxes will unshare the folder. If you want to know what folders are being shared by you, use Computer Management to show you all your shared folders. Go to Control Panel -> Administrative Tools -> Computer Management and expand System Tools -> Shared Folders -> Shares.
How to display all shared folders in Windows
The ADMIN$, C$, and IPC$ is shared by default. You do not need to worry about that.

Here are a few steps you can take to protect yourself from intruders in getting in your shared folders.
1. Unshare the shared folder after you’re done sharing the file to another person.
2. Use a money dollar sign $ at the end of the Share name to hide shared folders from being displayed publicly.
How to hide shared folders
3. Use NetShareMonitor to notify you when someone is accessing your shared folders.
4. Use a “router” instead of direct connect to the Internet as it gives you a layer of protection against intruders. Works only at Home.
5. Do not use Simple File Sharing. Go to Control Panel -> Folder Options -> click the View tab, and uncheck “Use simple file sharing”.
How to disable simple file sharing
6. Finally, a decent firewall can protect you from intruder.

Now I’ll show you how easy and fast it is for an intruder to scan for open shared folders in network or Internet. There are many types of security scanners but I am going to use a simple, small and fast tool called “Angry IP Scanner” to scan hundreds and thousands of computers for shared folders.

I downloaded the latest Angry IP Scanner and also the Windows Shares plugin. I ran a test scan on a range of IP addresses and found a few victims that has some folders being shared.
Scanning for open shared folders

I simply use the Windows method of access another computer \\IP or \\HOSTNAME. In this case, I enter \\218.208.224.16 in Windows RUN and hit the OK button.
Access Shared Folders

Within seconds, a window box appears displaying the shared folders. I can now access the victim shared My Documents folder and “maybe” even have the rights to change, add or delete files.
Victim of Shared Folders

See how easy it is for an intruder to access your shared folders? Stop being a victim and start protecting yourself.

[ Download Angry IP Scanner ]


Related posts:
  • How to remove My Sharing Folders in My Computer
  • Monitor and Notify when Shared Folders being Accessed
  • Hide shared folders – based on users access level
  • Network Benchmark – Test Your Network Speed
  • Find Out What Files and Folders are Taking Up Hard Drive Spaces
    • Pingback: The Malaysian Blogosphere » Blog Archive » Raymond.CC: Dangers of Sharing Folders on the Network

    • Varun

      Hi,

      Can you explain what simple file sharing means? Windows recommends it so r they wrong?

    • http://www.raymond.cc/ Raymond

      Windows recommends Simple File Sharing because it’s easy and no configuration needed. Basically anyone is able to share files without knowing Read/Write access rights.

    • denial

      This should *not* work on Windows XP. By default Windows Firewall prevents accessing NetBIOS ports (TCP/139, TCP/445, UDP/137 and UDP/138) from the Internet. Access is allowed only from subnet (LAN).

      Next, some ISPs (mine included) prevents NetBIOS traffic on their internal routers and thus scanning for open shares is impossible.

      If you scan for open shares on LAN (well Internet also, in case your ISP does not block NetBIOS traffic) and trying to connect to found share logon window will pop-up. You must actually enter username and password. Well, most of the times Administrator/{NULL} will work just fine…

      Anyway, Raymond, can you please explain how did you connect to Windows XP machines *without* entering valid credentials? The only thing that comes to my mind is that ACLs for shares were set to Everyone. IIRC, this is default setting in Windows XP.

    • http://www.raymond.cc/ Raymond

      Not everyone has SP2 installed, hence firewall is not available. There are also people like me that never uses Windows Firewall.

      I don’t think my ISP is blocking NetBIOS traffic because we all malaysians know that they are managed by a bunch of incapable so called engineers. There’s always massive downtime.

      denial, I am not sure what version of Windows are the victims running but everytime I run a scan, there’s surely someone with open shares and I am able to access without entering login credentials.

      One thing I know is if you disable Simple File Sharing, it will prompt to login before I can access a shared folder. As for Simple File Sharing, there’s no way I am able to configure access rights.

    • m7moud

      thank you very much Man

    • somedude

      Okay, so i know now that i shouldn’t really share folders on my network anymore, but are there any possible legal dangers associated with scanning an ip range (your own isp’s range for example)?

      of course if you dont intend to actually do anything with the security breach (if and once you have found one on another person’s computer), is there anything wrong with scanning?

    • Nerve

      @Somedude;

      I dont think they is anythig wrong in scanning an ISP’s range if it was not stated in ther TOS.

      @Rayomd;

      Thank you very much; another informative 1..
      U’re da Man!

    • Blood

      Why is it always when i’m scanning for some IP range I can’t browse the net, chat etc (as if i’m not connected at all) ?

    • Nerve

      @blood;

      That’s Weird, maybe ur Internet connection’s not so good and scanning for some IP range it’s eats up alot of bandwith.

    • http://www.raymond.cc/ Raymond

      Blood, that’s because all your threads are being used up by the scanner.

    • Blood

      Ah I see…What is the meaning of thread btw ? I notice it in the scanner but don’t know what that means.

      Oh and also…I was able to play some online game at that time.

    • Cyber Community

      I don’t understand about Windows Shares plugin…
      May you explain that…
      I didn’t see a shared..

      Thank’s before…

    • Jen

      So, it was your evil twin, huh?
      Admit that it was you, I\’m glad that you are a good guy now.

    • http://www.cultoftheinternet.com Ryan

      anybody remember that program smbdie.exe. Great fun messing with my roommates in school. anyway yes turn this shit off.

    • http://www.raymond.cc/ Raymond

      @Jen, yeah my evil twin is dead. Heh.. Only the good one left.

      @Ryan, yeap, I sure remember smbdie.exe. In fact I still have it with me. Nearly everyone has SP2 now and won’t be affected by this bug anymore.

    • Guy

      Thanks for the information! Wait so are my drives like IPS$, ADMIN$, C$, and other drives I may have set to be on some default share?

    • http://heellp jj

      I want someone to send me easy steps to follow to get into the local network which isn’t shared at all (printer + folders) I only recieve an internet connection through a hub. Is it possible to access there computers through a rat program or any program besides that because they have stolen passwords so now i want revenge

    • http://questionaboutsharedfolders h

      i came across your post after googling shared folders. i got a virus on my computer out of nowhere and i had to pay norton $100 to remotely access my computer to fix it. while scanning my computer they found that i had the box checked to give access to my computer via a shared folder. they asked if i wanted this- but i had no idea what it was- so they took it off. but today i just got onto my boyfriend’s computer to find a picture of us and i found that he had a shared file folder titled with my name. i have no idea how this was there- but i am beginning to suspect that he got into my computer and gave himself access to my stuff. is this possible? and if so- based on your article above it seems that the reason my computer got a virus could likely be because of this shared folder that was created. can you verify if this is actually a possibility? i have been having issues of trust with my boyfriend as of late- he read my email and looked into my phone- so this would not be surprising. please let me know if this actually possible for him to do. are shared file folders created by people to snoop on others? thank you for your help.

    • Iqraam

      hi how do i install the windows shares plugin i try to access a folder on someone elses pc it says you dont have permission

    • John Wehlitz

      So, how would someone get past the shared folder? When I was using XP I always had a shared folder, but it only contained files that I wanted to share. Copies of files at that.

      Do you consider a password protected shared folder safe? How about without simple file sharing, and with restrictions set on the secruity tab?

    • arun

      thanks

    Copyright © 2005-2012 - Raymond.CC Blog