Home
Topics
Application and Platform Security
Open Source Security Tools and Applications
Screencast: ShareEnum eases network enumeration, network share permissions

Screencast: ShareEnum eases network enumeration, network share permissions

Screencast: ShareEnum eases network enumeration, network share permissions

Date: Feb 24, 2012

When conducting security reviews and penetration tests, insecure network shares are often found containing sensitive information. But the network enumeration effort to discover these shares can be a time-consuming and difficult process.

In this month’s SearchSecurity.com screencast, expert penetration tester Mike McLaughlin of First Base Technologies demonstrates how to use ShareEnum, a free tool for network enumeration. He provides a link to download ShareEnum, and shows how simple it is to locate unsecure network shares and display network share permissions. ShareEnum makes network enumeration quick and simple with no installation required.

About the presenter:
Mike McLaughlin is a penetration tester working for First Base Technologies, an information security consultancy in the UK. Mike's daily work consists of both internal and external network based penetration testing, Web application penetration testing, and social engineering.

More on Open Source Security Tools and Applications

Armitage tutorial: How to use Armitage for vulnerability assessments
VIDEO - Video: In this Armitage tutorial, Keith Barker of CBT Nuggets shows how to use the Metasploit add-on to perform vulnerability assessments.
How to use ThreadFix to simplify the vulnerability management process
VIDEO - Video: Keith Barker of CBT Nuggets demonstrates how Denim Group's ThreadFix helps simplify the enterprise vulnerability management process.
Zed Attack Proxy tutorial: Uncover Web app vulnerabilities using ZAP
VIDEO - Video: Keith Barker of CBT Nuggets offers a OWASP Zed Attack Proxy tutorial. Learn how to find and nullify Web application vulnerabilities using ZAP.
Open source security tools: Getting more out of an IT security budget
Answer - Open source security tools can help stretch your IT security budget further -- that is, if you use them strategically. Joseph Granneman explains how.
Social engineering penetration testing: Four effective techniques
Tip - Social engineering penetration testing is now a must for enterprises. Learn about the four methods your pen tests should use.
Dangerous Samba vulnerability affects all Linux systems
News - The commonly used tool contains an error that can be executed remotely by attackers, giving them root access to a system. Proof-of-concept code is available, experts warn.
( Apr 11, 2012 )
Addressing HP netbook security with webOS discontinued
Answer - A company contemplates the security implications of continuing an HP netbook rollout with webOS discontinued
OpenStack security analysis: Pros and cons of open source cloud software
Answer - Expert Michael Cobb examines the open source cloud computing platform OpenStack and relevant OpenStack security issues.

Back to top

More from Related TechTarget Sites

Cloud Security
Consumerization
Financial Security
SMB Security
Security AU
Security IN
Computer Weekly

Cloud Security
- Storing data in the cloud: Addressing data location security issues
  
  When storing data in the cloud, ignoring the physical location of cloud data is a major mistake. Learn how to prevent data location security issues.
- An introduction to enterprise hybrid cloud security
  
  A custom cloud infrastructure requires a special set of security controls. Get advice on how to implement hybrid cloud security the right way.
- SOC 2 reports: The de facto cloud provider security standard
  
  They're not perfect, but SOC 2 reports are becoming the baseline for cloud provider security assessments. Expert Dave Shackleford discusses.
Consumerization
- Rich mobile platforms vs. mobile Web-based services
  
  One big debate right now is whether employees should use local applications or mobile Web-based services. There are use cases for each kind of app.
- NAC security becoming critical infrastructure component for BYOD
  
  Organizations are warming up to NAC security products due to popularity of BYOD for robust device security and better systems integration.
- Managing endpoints is about monitoring access, not device control
  
  Managing endpoints in the BYOD era isn't easy, and you have to come at it with the right attitude. Focus more on access and less on device control.
searchFinancialSecurity
- PayPal CISO: Laws must foster better cybersecurity information sharing
  
  PayPal's Michael Barrett says many firms fear misuse of shared cybersecurity data. He also discusses the evolution of PCI DSS and mobile payment security.
- Cybergang plans to use Trojan against U.S. banks
  
  A cybergang in Eastern Europe revealed plans to attack U.S. banks with a Gozi-like Trojan, according to RSA.
- Improved Shylock Trojan targets banking users
  
  The latest variant of the banking Trojan is causing numerous problems, Symantec said.
searchMidmarketSecurity
- Windows Phone 7 security: Assessing WP7 security features
  
  Windows Phone 7 security features are proving to be a mixed bag. Sam Cattle assesses the enterprise security pros and cons of the latest Windows mobile platform.
- Choosing the best security certifications for your career
  
  Whether starting your career or planning your next step as an IT security professional, this tip will guide you toward the best certifications for your interests and experience.
- A step-by-step SMB IT security risk assessment process
  
  Assessing your organization's security threats and risks takes just five steps, says Robbie Higgins. Check out his quick guide to the SMB security risk assessment process.
searchSecurityAU
- Black Hat 2013: Experts urge elliptical curve cryptography adoption
  
  A session by a team of crypto experts at Black Hat USA 2013 argued that RSA and Diffie-Hellman should be abandoned in favor of ECC.
- New advanced persistent threat protection: Beyond perimeter defense
  
  Firewalls and antivirus are ineffective in the face of APT attacks. Expert Nick Lewis offers suggestions for advanced persistent threat protection.
- Cisco spends cool $2.7 billion in Sourcefire acquisition
  
  In biggest security acquisition since 2011, Cisco has announced it will buy IDS maker Sourcefire for $2.7 billion.
Information Security
- Indian banks step up security amid mobile banking acceleration
  
  The Indian banking system is at the begining of a new era, driven by mobile technology, but the widening of access to banking services brings with it security risks
- Web app attacks demand automated defences, study finds
  
  Automation is the most effective way to tackle multiple prolonged cyber attacks on web applications, a study has confirmed
- BlackBerry ready to enable India to track messages
  
  BlackBerry is ready to provide Indian law enforcement authorities with a way to track emails, email attachments and chats sent over its services
Computer Weekly
- Government to put 50% of all new IT spend through SMEs
  
  The government wants to put half of all new IT spending through small IT suppliers – doubling the previous target
- CIO interview: Mike Timlett, CitySprint
  
  Mike Timlett's career as an IT director has tracked the rise of mobile technologies that empower new business processes
- Cisco incubator to connect UK startup clusters
  
  Cisco is launching its National Virtual Incubator to harness innovation and incubation across the UK.

All Rights Reserved,Copyright 2000 - 2013, TechTarget