Objective
Identify and report on Windows hosts in the network which allow file/folder access (READ/WRITE/Execute) for Everyone.
Scenario:
- Using agent based scanner, I extracted share permissions from 100 Windows 2012 Servers where at least one file/folder was allowed for Everyone.
Sample Permission Output:.
Share path : \\ip_address\file_name
Local path : drive_letter:\file_name
[*] Allow ACE for Everyone: 0x001f01ff
FILE_GENERIC_READ: YES
FILE_GENERIC_WRITE: YES
FILE_GENERIC_EXECUTE: YES
- Among 100 Windows 2012 Servers, only 20 were actually accessible (shared file/folder were accessible from file explorer and this was checked by manual browsing) by Everyone in the network.
Question
I have Nessus and I can manage remote authentication:
- How to identify more hosts like these using some automated method?
- How to compare NTFS and sharing permissions using some automated method?