Korban: Install insecure SAMBA - Revision history

Onnowpurbo at 00:01, 3 June 2018

2018-06-03T00:01:57Z

← Older revision		Revision as of 00:01, 3 June 2018
Line 22:		Line 22:
	Kita akan mempunyai share folder dengan nama Drop yang bisa di akses.		Kita akan mempunyai share folder dengan nama Drop yang bisa di akses.

			==Setup Manual==

	~~Your server should restart and you should have a Samba share named Drop ready to be accessed~~. ~~See the end of this guide for details on how to access it.~~		Instalasi secara manual tidak recommended, tapi kalau ingin memaksa juga bisa mengikuti langkah berikut.

	~~==Setup Manual==~~

	Install samba		Install samba

Onnowpurbo: /* Instalasi Automatis */

2018-05-31T23:32:33Z

Instalasi Automatis

← Older revision		Revision as of 23:32, 31 May 2018
Line 13:		Line 13:
	Bagi anda yang tidak mau pusing dapat menjalankan script berikut di server ubuntu linux.		Bagi anda yang tidak mau pusing dapat menjalankan script berikut di server ubuntu linux.

			sudo su
			cd /usr/local/src
	wget https://raw.githubusercontent.com/Allar/automated-insecure-samba-share/master/automated-insecure-samba-share.sh -O automated-insecure-samba-share.sh		wget https://raw.githubusercontent.com/Allar/automated-insecure-samba-share/master/automated-insecure-samba-share.sh -O automated-insecure-samba-share.sh
	chmod +x automated-insecure-samba-share.sh		chmod +x automated-insecure-samba-share.sh

Onnowpurbo at 05:37, 31 May 2018

2018-05-31T05:37:25Z

← Older revision		Revision as of 05:37, 31 May 2018
Line 2:		Line 2:


	~~How To Set Up Completely Insecure Samba Shares on~~ Linux ~~(Ubuntu Server)~~		Berikut ini adalah cara membuat share folder samba yang sama sekali tidak aman di Linux.
			Kita kadang kala membutuhkan share yang tidak aman ini terutama untuk memudahkan sharing
			bagi desktop yang ada di jaringan atau untuk latihan serangan.

	~~This document describes how to set up completely open~~, absolutely insecure, fully accessible Samba shares on Ubuntu Server. This is incredibly useful for rapid deployment testing from a Windows machine to a Ubuntu Server target as a deployment can be then done with a simple robocopy or even a "drag and drop" within Windows.		Share yang akan dibuat benar-benar tidak aman, oleh karenanya
			mesin / server tersebut harus dapat di format / delete sewaktu-waktu.

	WARNING: This will remove all pre-existing Samba shares on the server. This should only ever be used on Ubuntu Servers that are non-critical. The machines you use this on must be able to be nuked at any time. This should never be used on a public facing machine as then the entire world may have access to your Samba share and potentially other dangerous things. Use this when you know it is only you or only a trusted network can access this Samba Share.		==Instalasi Automatis==
	~~Requirements~~

	~~A Linux Server you have full access to. This guide covers an Ubuntu Server but the instructions should be the same for most Linux distributions.~~		Bagi anda yang tidak mau pusing dapat menjalankan script berikut di server ubuntu linux.
	~~Accepting responsibility for creating an insecure file share on your server~~
	~~Access to a shell on the~~ server~~, whether its a local shell, or a remote one (i.e. PuTTY on Windows)~~

	~~Automated Version~~

	I wrote a script that will do this for you automatically. It will create a Samba share called Drop at /home/Drop. If you don't care where your shared folder is located or what it is named and just want an insecure Samba share, this is the method for you. Otherwise follow the manual instructions.

	~~If you want to see the source of the automated version, it can be found here on my GitHub.~~

	~~To do this automatically, log into a shell on your server, then execute the following lines:~~

	wget https://raw.githubusercontent.com/Allar/automated-insecure-samba-share/master/automated-insecure-samba-share.sh -O automated-insecure-samba-share.sh		wget https://raw.githubusercontent.com/Allar/automated-insecure-samba-share/master/automated-insecure-samba-share.sh -O automated-insecure-samba-share.sh
	chmod +x automated-insecure-samba-share.sh		chmod +x automated-insecure-samba-share.sh
	./automated-insecure-samba-share.sh		./automated-insecure-samba-share.sh

			Server kemudian akan restart.
			Kita akan mempunyai share folder dengan nama Drop yang bisa di akses.


	Your server should restart and you should have a Samba share named Drop ready to be accessed. See the end of this guide for details on how to access it.		Your server should restart and you should have a Samba share named Drop ready to be accessed. See the end of this guide for details on how to access it.
	~~Manually Setting up the Samba Share~~

	~~1. Install Samba if it isn't installed already. This can be done with:~~		==Setup Manual==

	~~sudo apt-get install~~ samba		Install samba

	~~2. Delete the default Samba configuration file.~~		sudo apt -y install samba

			Lakukan

	sudo rm /etc/samba/smb.conf		sudo rm /etc/samba/smb.conf
			sudo mkdir /home/Drop

	~~3. Make a directory for your Samba share. I will be using the directory~~ /home/Drop		sudo chown YOUR_USERNAME_HERE /home/Drop

	~~sudo mkdir /home/Drop~~		Ubah YOUR_USERNAME_HERE dengan username anda.

	4. As my created directory is outside my user directory, it had to be created by the root user (sudo does that for us). We don't want outsiders accessing the Samba share as root, so instead we'll make this directory accessible by the current shell user (assuming you are not logged in as root). Replace YOUR_USERNAME_HERE with your user name.		Edit file konfigurasi samba

	~~sudo chown YOUR_USERNAME_HERE~~ /~~home~~/~~Drop~~		/etc/samba/smb.conf

	~~5. Begin editing a new Samba configuration file. Replace YOUR_USERNAME_HERE with the same user name you used in the previous step. Replace YOUR_SERVER_HOSTNAME_HERE with the hostname of your server.~~		Edit

	[global]		[global]
Line 63:		Line 61:
	public = yes		public = yes

	6. If you want to add additional Samba shares, copy paste the entire [Drop] definition and add it to the bottom of the configuration file. Then change [Drop] to [THE_NAME_OF_YOUR_SHARE] and path = /home/Drop to the path of your new share's directory.		Ubah YOUR_USERNAME_HERE dengan username anda.
			Ubah YOUR_SERVER_HOSTNAME_HERE dengan hostname server.

	~~7. Be sure to allow Samba access through your~~ firewall~~. I'm using UFW here as it is pretty straightforward~~.		Ubah firewall.

	sudo ufw allow samba		sudo ufw allow samba

	8. Reboot ~~the~~ server.		Reboot server.

	sudo reboot		sudo reboot

	~~Accessing the new Samba Share~~

	You should be able to access your Samba share in Windows under Network in any explorer window. If you do not see it, you can type in \\ServerHostName and you should see your new Samba Share and have full access without any form of credentials.

Onnowpurbo: Created page with "Sumber: https://allarsblog.com/2015/11/06/setting-up-samba-no-security/ How To Set Up Completely Insecure Samba Shares on Linux (Ubuntu Server) This document describes how..."

2018-05-31T05:25:23Z

Created page with "Sumber: https://allarsblog.com/2015/11/06/setting-up-samba-no-security/ How To Set Up Completely Insecure Samba Shares on Linux (Ubuntu Server) This document describes how..."

New page

Sumber: https://allarsblog.com/2015/11/06/setting-up-samba-no-security/

How To Set Up Completely Insecure Samba Shares on Linux (Ubuntu Server)

This document describes how to set up completely open, absolutely insecure, fully accessible Samba shares on Ubuntu Server. This is incredibly useful for rapid deployment testing from a Windows machine to a Ubuntu Server target as a deployment can be then done with a simple robocopy or even a "drag and drop" within Windows.

WARNING: This will remove all pre-existing Samba shares on the server. This should only ever be used on Ubuntu Servers that are non-critical. The machines you use this on must be able to be nuked at any time. This should never be used on a public facing machine as then the entire world may have access to your Samba share and potentially other dangerous things. Use this when you know it is only you or only a trusted network can access this Samba Share.
Requirements

A Linux Server you have full access to. This guide covers an Ubuntu Server but the instructions should be the same for most Linux distributions.
Accepting responsibility for creating an insecure file share on your server
Access to a shell on the server, whether its a local shell, or a remote one (i.e. PuTTY on Windows)

Automated Version

I wrote a script that will do this for you automatically. It will create a Samba share called Drop at /home/Drop. If you don't care where your shared folder is located or what it is named and just want an insecure Samba share, this is the method for you. Otherwise follow the manual instructions.

If you want to see the source of the automated version, it can be found here on my GitHub.

To do this automatically, log into a shell on your server, then execute the following lines:

wget https://raw.githubusercontent.com/Allar/automated-insecure-samba-share/master/automated-insecure-samba-share.sh -O automated-insecure-samba-share.sh
chmod +x automated-insecure-samba-share.sh
./automated-insecure-samba-share.sh

Your server should restart and you should have a Samba share named Drop ready to be accessed. See the end of this guide for details on how to access it.
Manually Setting up the Samba Share

1. Install Samba if it isn't installed already. This can be done with:

sudo apt-get install samba

2. Delete the default Samba configuration file.

sudo rm /etc/samba/smb.conf

3. Make a directory for your Samba share. I will be using the directory /home/Drop

sudo mkdir /home/Drop

4. As my created directory is outside my user directory, it had to be created by the root user (sudo does that for us). We don't want outsiders accessing the Samba share as root, so instead we'll make this directory accessible by the current shell user (assuming you are not logged in as root). Replace YOUR_USERNAME_HERE with your user name.

sudo chown YOUR_USERNAME_HERE /home/Drop

5. Begin editing a new Samba configuration file. Replace YOUR_USERNAME_HERE with the same user name you used in the previous step. Replace YOUR_SERVER_HOSTNAME_HERE with the hostname of your server.

[global]
guest account = YOUR_USERNAME_HERE
map to guest = bad user
workgroup = WORKGROUP
server string = YOUR_SERVER_HOSTNAME_HERE
security = user
name resolve order = hosts lmhosts
create mask = 0777
directory mask = 0777

[Drop]
path = /home/Drop
guest ok = yes
read only = no
writable = yes
public = yes

6. If you want to add additional Samba shares, copy paste the entire [Drop] definition and add it to the bottom of the configuration file. Then change [Drop] to [THE_NAME_OF_YOUR_SHARE] and path = /home/Drop to the path of your new share's directory.

7. Be sure to allow Samba access through your firewall. I'm using UFW here as it is pretty straightforward.

sudo ufw allow samba

8. Reboot the server.

sudo reboot

Accessing the new Samba Share

You should be able to access your Samba share in Windows under Network in any explorer window. If you do not see it, you can type in \\ServerHostName and you should see your new Samba Share and have full access without any form of credentials.

==Referensi==

* https://allarsblog.com/2015/11/06/setting-up-samba-no-security/