Posted on

Sharesniffer – Network Share Sniffer And Auto-Mounter For Crawling Remote File Systems

Sharesniffer – Network Share Sniffer And Auto-Mounter For Crawling Remote File Systems

 

sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares.

How to use
Example to find all hosts in 192.168.56.0/24 network and auto-mount at /mnt:

python sniffshares.py -l 4 --hosts 192.168.56.0/24 -a -m /mnt


Requirements

  • Python 2.7 or 3.5
  • Linux or macOS
  • Nmap https://nmap.org in PATH
  • Nmap scripts (.nse) in PATH (on Linux/macOS they are usually in /usr/local/share/nmap/), if you don’t have the ones required are also in the rootdir of sharesniffer.
  • python-nmap (pip install python-nmap)
  • netifaces (pip install netifaces)

Download

$ git clone https://github.com/shirosaidev/sharesniffer.git
$ cd sharesniffer

CLI Options

usage: sniffshares.py [-h] [--hosts HOSTS] [-e EXCLUDEHOSTS] [-l SPEEDLEVEL]
                      [-n] [--nfsmntopt NFSMNTOPT] [-s]
                      [--smbmntopt SMBMNTOPT] [--smbtype SMBTYPE]
                      [--smbuser SMBUSER] [--smbpass SMBPASS] [-a]
                      [-m MOUNTPOINT] [-p MOUNTPREFIX] [-v] [--debug] [-q]
                      [-V]

optional arguments:
-h, –help show this help message and exit
–hosts HOSTS Hosts to scan, example: 10.10.56.0/22 or 10.10.56.2
(default: scan all hosts)
-e EXCLUDEHOSTS, –excludehosts EXCLUDEHOSTS
Hosts to exclude from scan, example:
10.10.56.1,10.10.56.254
-l SPEEDLEVEL, –speedlevel SPEEDLEVEL
Scan speed aggressiveness level from 3-5, lower for
more accuracy (default: 4)
-n, –nfs Scan network for nfs shares
–nfsmntopt NFSMNTOPT
nfs mount options (default: ro,nosuid,nodev,noexec,udp
,proto=udp,noatime,nodiratime,rsize=1024,dsize=1024,ve
rs=3,rdirplus)
-s, –smb Scan network for smb shares
–smbmntopt SMBMNTOPT
smb mount options (default: ro,nosuid,nodev,noexec,udp
,proto=udp,noatime,nodiratime,rsize=1024,dsize=1024)
–smbtype SMBTYPE Can be smbfs (default) or cifs
–smbuser SMBUSER smb username (default: guest)
–smbpass SMBPASS smb password (default: none)
-a, –automount Auto-mount any open nfs/smb shares
-m MOUNTPOINT, –mountpoint MOUNTPOINT
Mountpoint to mount shares (default: ./)
-p MOUNTPREFIX, –mountprefix MOUNTPREFIX
Prefix for mountpoint directory name (default:
sharesniffer)
-v, –verbose Increase output verbosity
–debug Debug message output
-q, –quiet Run quiet and just print out any possible mount points
for crawling
-V, –version Prints version and exits


Source: FeedBurner