NetBIOS and SMB Enumeration - Paiet/SEC-335 GitHub Wiki

  • NetBIOS
    • Used by Windows for
      • File sharing
      • Printer sharing
    • nbtstat (Windows)
      • -c Cache
      • -n Names
    • nbtscan (Linux)
      • -r target_IP
      • -v for more output
    • nmap
      • nmap -sV --script nbstat.nse target_IP
  • SMB
    • File sharing
    • CIFS (Common Internet File System)
    • Can use TCP directly
      • Port 445
    • Can use UDP/TCP
      • UDP 137,138
      • TCP 137,139
        • NetBIOS over TCP/IP
    • Tools
      • nmap
        • nmap -A -t4 -n -Pn -p 445 target_IP
      • net view
        • net view \\target_IP /ALL
        • net view example.com