EC EHE - Enum Tools

 



Nbtstat Utility

Source: https://docs.microsoft.com

Nbtstat is a Windows utility that helps in troubleshooting NETBIOS name resolution problems. The nbtstat command removes and corrects preloaded entries using several case-sensitive switches. Attackers use Nbtstat to enumerate information such as NetBIOS over TCP/IP (NetBT) protocol statistics, NetBIOS name tables for both local and remote computers, and the NetBIOS name cache.

The syntax of the nbtstat command is as follows:

nbtstat [-a RemoteName] [-A IP Address] [-c] [-n] [-r] [-R] [-RR] [-s] [-S] [Interval]

The table shown below lists various Nbtstat parameters and their respective functions.

Nbtstat Parameter

Function

-a RemoteName

Displays the NetBIOS name table of a remote computer, where RemoteName is the NetBIOS computer name of the remote computer

-A IP Address

Displays the NetBIOS name table of a remote computer, specified by the IP address (in dotted decimal notation) of the remote computer

-c

Lists the contents of the NetBIOS name cache, the table of NetBIOS names and their resolved IP addresses

-n

Displays the names registered locally by NetBIOS applications such as the server and redirector

-r

Displays a count of all names resolved by a broadcast or WINS server

-R

Purges the name cache and reloads all #PRE-tagged entries from the Lmhosts file

-RR

Releases and re-registers all names with the name server

-s

Lists the NetBIOS sessions table converting destination IP addresses to computer NetBIOS names

-S

Lists the current NetBIOS sessions and their status with the IP addresses

Interval

Re-displays selected statistics, pausing at each display for the number of seconds specified in Interval

Table 2.1: Nbtstat parameters and their respective functions

The following are some examples for nbtstat commands.

1. The nbtstat command “nbtstat –a <IP address of the remote machine>” can be executed to obtain the NetBIOS name table of a remote computer.

Figure 2.12: Nbtstat command to obtain the name table of a remote system

2. The nbtstat command “nbtstat –c” can be executed to obtain the contents of the NetBIOS name cache, the table of NetBIOS names, and their resolved IP addresses.

Figure 2.13: Nbtstat command to obtain the contents of the NetBIOS name table



NetBIOS Enumerator

Source: http://nbtenum.sourceforge.net

NetBIOS Enumerator is an enumeration tool that shows how to use remote network support and to deal with some other web protocols, such as SMB. As shown in the screenshot, attackers use NetBIOS Enumerator to enumerate details such as NetBIOS names, usernames, domain names, and media access control (MAC) addresses for a given range of IP addresses.

Figure 2.14: Screenshot of NetBIOS Enumerator

The following are some additional NetBIOS enumeration tools:


Global Network Inventory (http://www.magnetosoft.com)
Advanced IP Scanner (https://www.advanced-ip-scanner.com)
Hyena (https://www.systemtools.com)
Nsauditor Network Security Auditor (https://www.nsauditor.com)

Comments

Post a Comment

Popular posts from this blog

Why Certifications Methods?

Hey there, Let’s take a step back and change our perspective: Approach certifications as a means to enrich your knowledge and skills, rather than merely a stepping stone to monetary gain or career advancement. Certifications should be about self-improvement and mastery , not just a checkbox on a resume. Embrace the journey of learning for its own sake, and watch how it transforms your personal and professional life in ways you never imagined. The Real Reason Behind Certifications The commercial marketing driving force of certifications is often centered around securing a new or better job. But I urge you to reconsider if this is your primary motivation . Take a moment to reflect on your personal development and your deepest interests within the realm of technology.  Is your passion in: Programming Crafting elegant code and solving complex problems? System Administration, Ensuring seamless operations and managing vast networks? Data Analytics Unraveling the stories hidden within data?
Read blog »

LPI E - ALL K.D.

Image
LPI Linux Essentials Outline All Knowledge Domains and Links to LPI One last check before test! Introduction to Linux >> 1.1 Linux Evolution and Popular Operating Systems >> 1.2 Major Open Source Applications >> 1.3 Open Source Software and Licensing >> 1.4 ICT Skills and Working in Linux Linux Evolution and Popular Operating Systems: This domain covers the history of Linux and its evolution, as well as an overview of popular Linux distributions. Major Open Source Applications: It focuses on introducing commonly used open source applications in the Linux ecosystem, such as LibreOffice, Firefox, and GIMP. Open Source Software and Licensing: This domain covers the concepts of open source software, different types of licenses, and their implications. ICT Skills and Working in Linux: It provides an overview of the basic information and communication technology (ICT) skills needed to work with Linux and explains the benefits of using Linux in variou
Read blog »

CCNP 03 - WANS

Image
WAN Problem Areas Certification Objectives Point-to-Point Protocols Switched Protocols      In this chapter, we will discuss troubleshooting point-to-point and switched protocols. It’s very important to understand the concepts and functionality of each protocol. We will discuss the HDLC and SDLC encapsulation methods, as well as both CHAP and PAP authentications via PPP. We will identify ISDN, Frame Relay, X.25, SMDS, and ATM transmissions and common problems associated with each of them. Point-to-Point Protocol      In the 1980s, the Internet really started to come to life due to its usage by the U.S. government, universities, and large corporations. These hosts were being supported by the Internet Protocol (IP) and connected via a series of LANs. The most common of these LANs was the Ethernet. Other hosts were connected through WANs, using technologies such as X.25. This eventually evolved into the need to transmit data via the original method used before networking was ever establis
Read blog »