In this will be taking a look at this assembly enumeration before an operating assembly, but we will
take a look at some of this assembly assembly stands for several months, message broke and it's widely
used in those systems and also in Linux systems.
Uh, this is my resume, those systems.
But coming to this Linux systems, there is a software called Sumba and we can connect to those Windows
as some Batiatus using this summer software.
So what this is ambitious admin's assembly is a protocol allows you to, uh, share your resources to
other computers in an organization.
It's used for network sharing, your first order network.
Uh, it's useful for sharing the files, printers and any whatever resource you are working properly.
So if you set up any, like, domain of some network third party computers and if you erode a folder
for the, uh, file sharing, then you can access using the can you can access the file using this,
uh, assembly port.
So that is the function of this assembly service.
And this assembly service is like favourite one of the favorite ports for the protesters, because there
are so many exploits, uh, regarding this assembly.
And it is also very vulnerable.
And you can see that, um, a few years ago, the recent attacks were occurring, ransomware.
And it is based on this assembly learnability, uh, attackers, they took advantage of this some vulnerability
and then, uh, they created a ransomware and then attacked these Windows XP machines.
So this assembly is very popular.
And if you find any assembly, what you need to be careful depends upon.
So let's get started.
Uh, my mother, Swedwood, too, is running and we can just do that and quickly.
And it's.
Let me just quickly do the things we.
So this is my daughter and this is my fault, this is my colonics machine, and this one may be the
hardest part to read.
It is check this one.
This matters to so many open boats, as you can see, it made vulnerable for all these boats and this
assembly, but we're going to put, based on the saga that is under Tenent and for the fate of these
two boats can be used for a civil service.
You can see there is two service running on that bus and Microsoft deals.
So these are the assembly services.
And let me scan only these two ports.
So I'm giving the minus B option and for everyone to come forward.
So we are concentrating only on these two spots in this video.
So, OK, no, let me do the Russians scanning.
So we have got this Russians who wanted to know it's been four, four and four, five, so the same
server is running and the Russian ambassador is in between three point three and four.
So you can just Google for those assembly Russian exploit assembly experts based on these Russian numbers.
So what we can do is we can also run the default scripts.
We are running these different groups only on these two pots, one that and for four.
So meanwhile, I will show you the NASA scripts.
How can we use these NASA scripts to take a look at Tennessee and we will get our the groups.
I want to read some so that I want to for a summit.
Right.
So you can see there are so many scripts ready to a certain group for the purpose of the parser and
the enumeration scripts that will get the domain and names and the process and services associations
and shares, you can pretty much use this as assembly to get some part files are your files and photos
are being shared on those server.
And you can also read their computer and you can see here the important ones are assembling a quiz.
So these are we can perform this server metastable to whether to check, if any, uh, if that machine
is vulnerable to any of these, uh, experts or not.
So sorry, I ordered a copy.
So we have got some more information by using the different groups.
This is a matter spreadable and this is the domain name and it has a workgroup.
And we have also got this oil discovery using this assembly service.
So we got the computer running is a Unix and the computer is portable and that computer networks is
a matter of basic input output system.
And this computer does not have enough personnel.
I don't think so.
So this computer can be easy to access any shares using this computer, not instead of IP.
So it has a domain name relevant.
And the fully qualified domain name is Matt Spreadable Domain.
And you can see as basically a account user ID level user.
So they use their username and password, maybe use anyone, any administrator can use it in the passwords.
But what we're going to do is we are going to enumerate some what you can say scripts to.
So let me check.
Are these vulnerabilities?
What I want to take is SMB Wallner.
So what is common in all this?
I can say when I start.
So no previous information has been caught again about this as we watch watching numbers and also you
can see the results as some beat, whether not this and must spend 054 is false and I Mustansiriya six
one four.
So these are two experts so you can also see it executer some scoop.
And it also felt so like this where if there are any true cases and my source for us.
So let me do the in shares to check any shares available to restore the forests that are being shared
on that server.
So there are some shares we can see, uh, conduce that means anonymous login is allowed.
We can see at Windorah this is that Mindshare and AIPAC dollar and you can see up.
And you can see also the absolute but the paint dollar, which is generally used for any printers and
I can see there is a term for that is also being shipped and it has the comment on us.
OK.
So one more comment on what to use and we can put a stop to tell that the name of this machine.
Do you want to reuse and scan the IP address?
Other.
So we have got this not so in the previous and my purse can we did not get the Bush name from the NYPD,
can we can get this embarrassment, that birth that these mothers were able to.
Oh, no, I want to say that we need to use some tools to connect to these assumptions.
Those are assembly map and some bickering.
So there there are a lot of options you can use for this assembly map, so we'll use the basic options.
You can see the example, a simple map minus your username and password and our domain name and the
host and the IP address.
So let us use this so we know that there is an anonymous login because we have got those shares.
Let's take this anonymous login.
If you don't give any username and password for this and we map, it will assume that analyzation are
the anonymous login.
So I think negotiations are not almost bargains are different.
So ID I on this IP address, so let me type in username.
I know this will be wrong, just to the answer to that, you can log in if you have the username and
password, can see authentication, are unwilling to do that once you should.
OK, this is the assembly map and you see another one called as ambigram.
And all you need to do is assembly line minus a minus capital to restore the shares from this from the
computer one and two to the ones you should not.
So if you use the Windows, uh, WiFi access versions from the windows, you can see you can connect
to disfellowshipped using the black backslash that Windows convention.
If you if you remember that, it will be the double breakfast.
But in the reenacts, this back contains some, uh, special value.
To remove that, we need to put another break through.
So let me hit enter so you can see this protocol negotiation failed this character.
So this is the error I got from this current quantitative machine.
And I searched for this error.
And I have got the solution.
And what I want you to put a double ferocious.
I need to set an option.
A kind of minimum protocol is equal to 21.
So this minimum protocol will use used for assembly if the, uh, the Sarasate protocol is very old
version.
Now I want to type in my car the next Passacaglia and there we go.
What the shell of shares names.
And we can see the exact shape names we got from the and map as an assembly item shares script.
We see the print term of ABC admin, etc. So now we connect to these, uh, shares and let's see what
it's inside these shapes.
So can I just remove this shell and I need to specify, let's set them up so I could open the password
so you can see anonymous login, successful and I can say help to get the comments I can run.
So this is similar to this, uh, FPP a coming right address.
So we have got these files.
I think these are not very much interested.
So let me ask this and let me go into this.
So it says that I like, but we got the debate because anonymous login is not enough for this app and
we try to log in as every lawyer, maybe we get the same error.
So all these samadhi shirts are allowed for the anonymous login and some other shows are not available
for the Anonymous.
So these are these comments you need to remember.
But there is one more tool called in on for Linux.
This will do every enumeration possible for the SMB assembly server assembly service, oddly enough,
for Linux, minus, say, for all types of enumeration.
I need to specify the IP address.
So as you can see, you've got a bunch of information.
This is Target and other deviants and the user name Blank Parcel is blank non user names, it just brutal.
The user names, administrative domain through, admin through and etc. And they've got the main work
group now that is workgroup.
And you can see there are so many services, you can see the Mercado's are nurse and session taking
on this I.P. address server does not at all session using username and password.
Not so since we do not get this, you know, for the next failure to log in via Anonymous, then it
aborted the ending of.
So these are pretty much these tools.
You can use this as somebody in operation to get much more juicy information.
Um, get excited about this submarine operation, if you will.
Conclusive?
No.
Then we will do some other rooms and then I will show you how these actually connect to the ships and
how we get information.
So no need to worry about these.
We just are just to demonstrate that these tools are available for these purposes.