Security Balance

It would be impossible to write about low hanging fruits without mentioning network shares. I say it because they are usually my favorite path to elevate privileges when I’m performing a penetration test. Among stuff that I’ve already found on unprotected (I mean, Everyone – Full Control) shares are:

- Source code for critical applications

- Configuration files of applications containing database credentials (VERY COMMON)

- Configuration files of applications containing Administrator level credentials for servers (service passwords!)

- Debug logs containing a lot of sensitive information and even user credentials (SMS logs!)

- Network and systems documentation (Lot’s of Visio diagrams)

- Personal private information (Human Resources stuff)

Network shares appear and grow on the network like tribbles. The problem starts with weak policies regulating the subject, but it grows when the infrastructure needed as an alternative for non-authorized shares is not available. If you compare companies that have a good file server infrastructure with those that are trying to save some bucks by saving file server megabytes you will notice that the last has a higher occurance of non-authorized file shares. Non-authorized network shares fall in that “Shadow IT” category and are an easy bet for unprotected sensitive information. I can tell from experience that just by browsing network shares you can own an entire network. No need for leet exploits.

If you are just starting as a security manager, include it as one of your first steps: map and control your network shares. You need to know where they are, what is inside and who can access them.