How to list hidden shares remotely

When sharing Windows folders on the network, it is possible to hide the shared folder from the list of shares. This can be done by adding a $-sign to the end of a share name.
It is important to mention that this does not really hide such shares from the network. If you ask a Windows machines for a list of its shares, then it reports all shares, including those with a $-sign. It are then the clients who filter out all shares that end in a dollar-sign.

So how can you get a list of all the hidden shares on a server?
Easy: open a DOS prompt and issue the following command: net view \\test-server /all

The output will be the following:

C:\Users\Lode>net view \\test-server /all
Shared resources at \\
test-server

Share name                 Type  Used as  Comment
-------------------------------------------------------------------------------
ADMIN$                     Disk           Remote Admin
C$                         Disk           Default share
IPC$                       IPC            Remote IPC
Temp                       Disk
The command completed successfully.

Tags: 

You might also be interested in...