Penetration Testing mailing list archives

Re: Windows Patch Auditing & "File and Print Sharing" disabled


From: Kurt Buff <kurt.buff () gmail com>
Date: Thu, 30 Apr 2009 14:18:38 -0700

Worth a try:

psinfo and/or psexec - www.microsoft.com/sysinternals

I can't remember if they depend on file/print sharing, or just an IPC$
connection, but they're free, and useful anyway, along with all the
rest of the sysinternals tools.

Kurt

On Thu, Apr 30, 2009 at 09:01, Mike Drugov <DRUGOVM () nychhc org> wrote:

Hello list,

I need some advise

I'm trying to scan a Windows Network where all end nodes except Domain Controller have "File & Print Sharing" 
disabled.

What I'm trying to get a list of Microsoft Updates that are missing.


So far I tried Nessus & Foundstone and none of them are able to provide a report with missing patches.(I'm able to 
get a report from Domain Controller)

Nessus support stated that "File & Print Sharing" is required for patch auditing


What is my other options?

Thanks


-----------------------------------------
Visit www.nyc.gov/hhc

CONFIDENTIALITY NOTICE: The information in this E-Mail may be
confidential and may be legally privileged. It is intended solely
for the addressee(s). If you are not the intended recipient, any
disclosure, copying, distribution or any action taken or omitted to
be taken in reliance on this e-mail, is prohibited and may be
unlawful. If you have received this E-Mail message in error, notify
the sender by reply E-Mail and delete the message.

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Tired of using other people's tools? Why not learn how to write your own exploits?
InfoSec Institute's Advanced Ethical Hacking class teaches you how to write stack and heap buffer overflow exploits 
for Windows and Linux. Gain your Certified Expert Penetration Tester (CEPT) cert as well.

http://www.infosecinstitute.com/courses/advanced_ethical_hacking_training.html
------------------------------------------------------------------------


------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Tired of using other people's tools? Why not learn how to write your own exploits? 
InfoSec Institute's Advanced Ethical Hacking class teaches you how to write stack and heap buffer overflow exploits for 
Windows and Linux. Gain your Certified Expert Penetration Tester (CEPT) cert as well. 

http://www.infosecinstitute.com/courses/advanced_ethical_hacking_training.html
------------------------------------------------------------------------


Current thread: