Re: Solaris Beginner

["Davegu1" <davegu1 () hotmail com>]

Ok, and yes, listen, samba shares files across NFS using tcpudp and tcpip, 
these files are displayed on your windows box as a drive or folder.

The windows xp client connects to the  Sollaris server using samba (tcpudp 
shares).

Samba share are exported as NFS. You can see these files in your windows 
client as another drive or folder, it will display the files whenever you 
want to view them and of course after mounting them.

Putty is a tool used to connect from your windows client via ssh or telnet 
and not via NFS or TCPUDP (samba shares), and this way once you're connected 
you can run unix commands.

In either way you can use both methods to connect to the server but you have 
to make sure either one are configured properly and how you need access.

David

--------------------------------------------------
From: "pma111" <pmaneedham () hotmail com>
Sent: Monday, January 04, 2010 11:08 AM
To: <pen-test () securityfocus com>
Subject: Solaris Beginner

> Is it possible to access data from a Solaris Server on Windows XP machine? 
> If
> so could you provide tools or strategies to accomplish this. I've heard of
> SAMBA but would prefer some detail on how this works, i.e a share on the
> Solaris box would have to be a SAMBA share would it not? Is it possible to
> access data on a solaris server from a windows machine in the same active
> directory domain, but without any specialist software?
>
> I have a copy of the /etc/shadow/ file from the Solaris Server which
> contains the encrypted passwords but I cannot find any Windows based
> crackers that will crack these passwords. I also dont know what client
> software would be required to access data on the Server from a Windows
> machine even if I do decrypt some weak passwords? Did see some mention of
> Putty but am unfamiliar with this or SAMBA. I also assume that any "open
> file shares" on the Solaris box wont be mappable or reachable to a windows
> machine, as is the case on win2k and windows 2003 servers, when all you 
> need
> is my network places and hope some of the shares hav been given the deadly
> "everyone acl" in NTFS? I appreciate Solaris uses a totally different file
> system to NTFS but I assume you can share directories with anyone on the
> network if desired? Any tips on accessing data on this Server from Windows
> much appreciated.
>
> Out of interest, what are the mailing lists views on Security of a Solaris
> Server if every user on the internal network only have windows machines?
> Even if there is a weak password or open file share on the Solaris Server,
> without specialist software is it fair to say the windows users still
> wouldnt be able to get hold of data on the Server, or is that a very naive
> view on things?
> --
> View this message in context: 
> http://old.nabble.com/Solaris-Beginner-tp27015916p27015916.html
> Sent from the Penetration Testing mailing list archive at Nabble.com.
>
>
> ------------------------------------------------------------------------
> This list is sponsored by: Information Assurance Certification Review 
> Board
>
> Prove to peers and potential employers without a doubt that you can 
> actually do a proper penetration test. IACRB CPT and CEPT certs require a 
> full practical examination in order to become certified.
>
> http://www.iacertification.org
> ------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------