(          (     )\ )    )                      
( )\     )   )\ ) (()/( ( /(     )  (      (      
)((_) ( /(  (()/(  /(_)))\()) ( /(  )(    ))\ (   
((_)_  )(_))  ((_))(_)) ((_)\  )(_))(()\  /((_))\
| _ )((_)_   _| | / __|| |(_)((_)_  ((_)(_)) ((_)
| _ \/ _` |/ _` | \__ \| ' \ / _` || '_|/ -_)(_-<
|___/\__,_|\__,_| |___/|_||_|\__,_||_|  \___|/__/

By: Spencer Alessi                          v0.1 

A tool to create randomly insecure file shares that also contain unsecured credential files.

1. Clone the repo then dot source the script

git clone https://github.com/techspence/BadShares
cd BadShares
. .\Invoke-BadShares

2. Download Invoke-BadShares.ps1 manually. Open PowerShell and navigate to where you saved the script, then run

. .\Invoke-BadShares

There are two options for creating BadShares.

1. Run BadShares with default settings

Invoke-BadShares

2. Run BadShares and provide custom settings

$BadSharesArray = @("IT","Accounting","Marketing","Executives","HR")
Invoke-BadShares -Root "C:\MyStuff" -Name "BadShares" -BadShareList $BadSharesArray

When you run BadShares, it will attempt to:

1. Create a root folder for all the BadShares it creates (e.g c:\BadShares)
2. Create various subfolders under the BadShares root folder (e.g. IT, Accounting, etc.)
3. Intentionally set insecure permissions on random shared folders (e.g. Everyone with FullControl)
4. Create random unsecured credentials files and scatter them in random shares folders (e.g. password.doc in the Accounting share)

A couple other things to note: When you run BadShares it will attempt to clear out any pre-existing shares & files from the BadShares root.

The script will also prompt you at each step, just to make sure you want to continue allowing the script to do it's thing.