From 0c6cb60ba9eb0e9a40d9c7d83cb7c83a234d4367 Mon Sep 17 00:00:00 2001 From: Gabriel M Date: Wed, 8 Apr 2026 21:50:51 +0200 Subject: [PATCH] Add README.md --- README.md | 52 ++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 52 insertions(+) create mode 100644 README.md diff --git a/README.md b/README.md new file mode 100644 index 0000000..9b8fe1d --- /dev/null +++ b/README.md @@ -0,0 +1,52 @@ +# Window Security Lab + +---------------------------------------------------------------------------------------------------------------------------------------------------------- +## Phase 1: Weak System + +### Objective: + In the objective of this labe we will create a vulnerable Winddows system and verify access from a Kali Linux attacker machin + +### What I Did + 1. Configured Windows and Kali on the same internal network + 2. Disabled firewall and security protections on Windows + 3. Enabled file sharing with no authentication + 4. Created a share folder (Shared Lab) + +### Attak Steps + 1. Scanned targets using nmap command + 2. Enumerated SMB shares + 3. Accessed the shared folder without any credentials + +### Key Results + 1. Port 445 (SMB) was open + 2. Shared resources were accessible without authentication + 3. Successfully accessed the system from Kali Linux machine + +### Risk + These type of Window configuration allows unathorized user to access files without credentials which can cause high risk security issues. +---------------------------------------------------------------------------------------------------------------------------------------------------------- + +## Phase 2: Authentication + +### What Changed + 1. We turned ON password protected sharing + 2. Created a user: labuser + +### What I tested + +1. Anonymous access (no login) + smbclient -L 192.168.10.10 -N -m SMB2 + #### Results: Access Denied + +2. Access with login + smbclient -L 192.168.10.10 -U labuser -m SMB2 + #### Result: SharedLab is visible + +3. Enter the shared folder + smbclient//192.168.10.10/ShatedLab -U labuser -m SMB2 + #### Result: Access Successful + +### What I Learned + 1. Authentication blocked the unathorized user + 2. Valid credntials allow access + 3. Security controls change how the system behaves