Lab 2A-4: Generic Enumeration Using Windows
Purpose
The purpose of this lab is to be able to perform some basic enumeration without the aid of automated tools. This lab covers some basic DOS commands and other techniques for evaluating the Win32 platform.
Tools
Net use and nbtstat command line.
Procedures
Connect to the Windows NT/2000 IPC$ share as a null user connection. Test vulnerability by Netuse command line. Once the null session is established the type command net view /domain which is used to list the domains on a Windows NT/2000 network. Type net view /domain:
Results
We found out NetBIOS name, Remote, Machine Type (ex. Unique or Group) and Status (Registered).
Time
20 min
Reflection
It is important for an information security professional to be able to perform some basic enumeration without the aid of automated tools. This skill can be ver usefull when evaluating a local machine rather than a network server