Shares from Windows

[Grizzly]

22 October 2018  at 15:16, Liam Proven wrote:
Re: Shares from Windows (at least in part)

>They are part of the infrastructure of Windows NT and used in
>Windows-to-Windows comms, domains, management etc. They've been there
>ever since NT first appeared; I deployed NT 3.1 in production, the
>first ever release.

>Leave them alone! If you remove them, yes, things will break.

AFAICT only third party (remote admin) software that wants root access will 
surly break, I could be wrong only time will tell

>They're only available to administrators, and your normal login

Anyone with physical access to "a" machine on the network in question can with 
little work be an admin

>shouldn't be one, meaning that they should be inaccessible anyway.

Well not so

If

1) you know (or can ping for) the ip of the target windows machine, (I went 
back to test and it was the ip I used) the hostname is not required

2) you know the Homegroup name, which may be the hardist part (if it was not 
left as WORKGROUP)

3) you have a valid login on Ubuntu (normal sudo level not even root)

all the hidden shares are visible, not sure what happens with a mounted 
TrueCrypt volume? I don't have one at hand to test