The office LAN's own protocols: files, desktops and calls

The idea

Three office services, three ports: files, desktops and calls, and what each one puts on the wire. The laptop shares one office network with fileServer (shared folders), deskServer (a remote desktop) and pbx (the phone system).

Steps

1. Three services, three well-known ports

   Each service waits on a number everyone agrees on, so a client, or an attacker, knows where to knock without asking. fileServer is 10.0.1.11, deskServer 10.0.1.12 and pbx 10.0.1.13. Knock on each one's port with nmap.

   laptop:~# nmap -n -p 445 10.0.1.11
   laptop:~# nmap -n -p 3389 10.0.1.12
   laptop:~# nmap -n -sU -p 5060 10.0.1.13

2. A file in the clear

   Offices keep their files in one place so everyone works on the same copy. fileServer shares folders over SMB, like a network drive. As alice, list its shares, then read a report from finance, and check what the recording caught.

   laptop:~# smbclient -L //10.0.1.11 -U alice%s3cret
   laptop:~# smbclient //10.0.1.11/finance -U alice%s3cret -c "get q3-report.txt -"