p0dalirius/pyFindUncommonShares

[enhancement] Add an option to check user access

CaledoniaProject opened this issue · 5 comments

CaledoniaProject commented

Can you also check whether it's readable anonymously or accessible by current user?

p0dalirius commented

Yes, I'll add this check

It will be a good step towards implementing #5

CaledoniaProject commented

FYI: nmap will show whether the current user has read access, read-write access or no access

CaledoniaProject commented

Can you implement something simple first? e.g just check if the user has access to the shares is good enough.
This looks quite much like it: https://github.com/fortra/impacket/blob/master/examples/smbclient.py#L98

Just do a login and catch the exception.

  • 👍1
p0dalirius commented

Implemented in fcd7508 with option --check-user-access :

Example with a domain user and as domain admin:

image