Command Line Miscellaneous

STNYLug Meeting Notes from 12-23-2003

More shell scripts/loops
=Checked a snort log and inspected some netbios info=  [excerpt from log..] 2.92    5  XXX.XX.XXX.XXX   MS-SQL Worm propagation attempt [/excerpt]

$ nmblookup -A XXX.XX.XXX.XXX Looking up status of XXX.XX.XXX.XXX DUYDD1         <00> -         B  SCH            <00> -  B  DUYDD1         <03> -         B  DUYDD1         <20> -         B  BLUE           <03> -         B 

$ smbclient -I XXX.XX.XXX.XXX -L DUYDD1 -U administrator -W SCH Password: Anonymous login successful

Sharename     Type      Comment -           --- Error returning browse list: NT_STATUS_ACCESS_DENIED Anonymous login successful [snip] [We could get 'anonymous logins' but every PC we checked had a password.] 

Wasn't that fun?
-Dan