Windows network resources

• NetBIOS enumeration (if port closed, none work)

  • NetBIOS Domain hosts: net view
  • NetBios Name Table: nbtstat use and example and nbtscan.
  • NetBIOS shares: DumpSec, Legion, NetBIOS Auditing Tool (NAT), SMBScanner, NBTdump (use, output).
  • Countermeasures: as discussed previously = close ports 135-139, disable NetBIOS over TCP/IP

• SNMP enumeration: SolarWinds IP Network Browser (commercial, see book).

  • Countermeasures: Windows close port 445.

• Windows DNS Zone Transfers: Active Directory is based on DNS and create new vulnerability, but provides tool -- “Computer Management” Microsoft Management Console (MMC) -- to restrict zone transfers to certain IP numbers.

Previous slide

Next slide

Back to first slide

View graphic version