OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Tool to remotely search for filetypes

From: Kurt Buff (kurt.buffgmail.com)
Date: Wed Aug 26 2009 - 19:37:20 CDT


On Sat, Aug 22, 2009 at 00:01, <sthitogmail.com> wrote:
> Hi List,
>
>  Greetings to all! I am searching for a tool that can remotely login to a
> network computer(I have admin privileges to the remote system) and remotely
> list/inventorize all the filetypes in the system. I am also looking for a
> GUI based option that will generate a report according to a specific type of
> file/s (something like a text box where you enter the filetype, e.g. *.txt
> and it will draw up a report filetypes in all the drives including hidden
> and system files). I can use the C$, D$, ADMIN$ share (or use NET USE), but
> it is becoming cumbersome. Also, it would be great if the tool could connect
> to multiple systems at once. I am assuming that all the $ shares are
> enabled.
>
> Hoping to find a quick response :)
>
> Cheers,
> Sthito.

Given your description, you're 1) examing Windows systems 2) assuming
that files aren't lying about what they are by file extension and 3)
not concerned about Alternate Data Streams . If that's the case, then
a suitable iteration of 'dir /s' should do what you want - including

'dir /s /a:h
'dir /s /a:s'

or even

'dir /s /a:-dhs'

The '/b' option might or might not be useful.

Piping the output to a local text file, massaging them with grep
(http://gnuwin32.sf.net for the Win32 version) and other tools will
probably get you where you need to go.

Kurt

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------