Home page logo
/

pen-test logo Penetration Testing mailing list archives

Re: Solaris Beginner
From: lukasz () piatek pl
Date: 5 Jan 2010 17:39:34 -0000

Hi.

pma111 wrote:
Is it possible to access data from a Solaris Server on Windows XP machine? If
   
Yes. It is possible. Even default installation of Solaris 10 has Samba 
you have mentioned about.

so could you provide tools or strategies to accomplish this. I've heard of
SAMBA but would prefer some detail on how this works, i.e a share on the
Solaris box would have to be a SAMBA share would it not? Is it possible to
access data on a solaris server from a windows machine in the same active
directory domain, but without any specialist software?

   
You need to implement any universal filesystem strategy. Samba is the 
simplest way to achieve it.
I have a copy of the /etc/shadow/ file from the Solaris Server which
contains the encrypted passwords but I cannot find any Windows based
crackers that will crack these passwords. I also dont know what client
software would be required to access data on the Server from a Windows
machine even if I do decrypt some weak passwords? Did see some mention of
Putty but am unfamiliar with this or SAMBA. I also assume that any "open
file shares" on the Solaris box wont be mappable or reachable to a windows
machine, as is the case on win2k and windows 2003 servers, when all you need
is my network places and hope some of the shares hav been given the deadly
"everyone acl" in NTFS? I appreciate Solaris uses a totally different file
   
Permissions set on filesystem level determine which in fact level of 
permissions to data is granted. It overrides any network share 
permissions but it is quite obvious, isn't it?
system to NTFS but I assume you can share directories with anyone on the
network if desired? Any tips on accessing data on this Server from Windows
much appreciated.
   
There is something like CIFS. It is common ground for such a great deal 
of filesystems around the World.
Out of interest, what are the mailing lists views on Security of a Solaris
Server if every user on the internal network only have windows machines?
Even if there is a weak password or open file share on the Solaris Server,
without specialist software is it fair to say the windows users still
wouldnt be able to get hold of data on the Server, or is that a very naive
view on things?
   
Concluding this message it is still uncertain for me whether you want to 
harden your network infrastructure or break someone's network. You would 
better read a little about Samba and hash type used to shadowing Solaris 
passwords. Google will solve such issues instantly.

Regards,
Lukasz Piatek

http://blog.lukaszpiatek.com
http://lukasz.piatek.pl
http://ntsecurity.pl


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault