I am surprised by the lack of awareness on network security at corporate level  

Sunday, November 2, 2008

Till today I never used a broadband connection other than the one they provide at my college. At college we are behind a proxy server, so we are not in direct connection with the computers outside our college.
Today I happened to use BSNL dataone broadband internet connection at my uncle’s place, and I casually scanned the network using netscan (A network scanning software) to find the computers alive in my network. I was expecting a few computers with printers shared, but I was surprised to find 3 computers with lot of files sensitive data stored. You can find 2 of them in the screen shot below.

Hacking a broadband internet network

The three computers I wound were.

Computer belonging to a chain of growing supermarkets

This computer had a lot of sensitive data like customers, suppliers and employee names, phone numbers and addresses. You won’t believe me but this computer had the files shared with write permissions. That means all the files on this computer are at my mercy. I can delete them if I want. I can make the system in operable by copying the viruses and Trojans to it. Here is a screen shot while i was browsing the files in the above computer.

browsing shared files on a network using netscan

Computer from a PhotoStudio

The second one I found was a computer from a photo studio. This computer had all the photographs shared. What if these shared photographs get in to the hands of people with evil mind??

One more from a Corporate office

I couldn’t make out where this third computer belonged, I guess it is also from corporate office, this had some bank statements and cheque details in it.

It’s quite common to share files weather it is in office or at home, but one has to be very careful while sharing sensitive and personal files over a network. This is where firewalls come in to play. Firewall prevents unauthorized access to your computer. You can add the list of ips to which you want to give access to your system in your trusted ips list so that they will be able access your files. Never share your files with right permissions unless its absolutely necessary.

I haven’t used any hardcore hacking techniques or tools to gain access to the shared folders in the above 3 computers. The whole procedure took me less than a minute. Even a layman can gain access to these there computers only thing is he has to identify them.
So people from now on don’t share your private files. In case if you have to share any files use firewall and add the ips to which you want to give access to your trusted list.

Please do share this article with your friends and family members and spread awareness about network security.
I will discuss in detail about how I identified those computers, about the scanner I used and how to secure your computer in my next post.
Don’t forget to subscribe to our feed to stay connected.

AddThis Social Bookmark Button


 

Design by Shubham Aka Draco