RE: Network Scan

[Andy Streule <andy.streule () lythamhigh lancs sch uk>]

you could go further and do

for /f %%a in ('net view ^| find "\\" ') do dir %%a\c$\*.jpg /a /b /s >>
list.txt
for /f %%b in ('list.txt') do move %%b \\server\evidence

then use blat(cmd emailer) to mail the list.txt to an
administrator/yourself.

i think each loop of the first FOR loop would append filenames to list.txt
so for the 2nd FOR loop the file would contain the all jpg's on all
computers.
this works cos the dir cmd produces output like:
\\t10-comp\c$\folder\filename

if you used scopy instead of move (I suppose youd  have to do a del
afterwards)
it would copy the security permissions so you could see who owned the file
(ie who downloaded it)

there are endless possibilities

regards browolf

Security Forums
==============================
http://www.security-forums.com






> -----Original Message-----
> From: webbi () sapc edu [mailto:webbi () sapc edu]
> Sent: 14 January 2003 14:47
> To: WhtWlf2001 () yahoo com; security-basics () securityfocus com
> Subject: RE: Network Scan
>
>
> While logged in as a domain admin:
>
> Dir /A /B /S \\usermachine\c$ | find /I ".jpg"
>
> Etc. Automate with Tool Of Your Choice and that should work for you..