Basics
NetBIOS provides us Commutation in LAN(local area network). generally, NetBIOS work on
port- 137(UDP), 138(UDP), 139(TCP)
I think only windows have NetBIOS services. All the higher version from Windows 2000, have the NetBIOS service.
NetBIOS can show you a lot of information about a Windows machine. and always remember that NetBIOS isn’t a protocol, but an API for naming service, and only really used for SMB service enhancements anymore. not many people use this in the present time.’
you can read more about NetBios like how it works. Click Here
for this tutorial, I am going to use Enum4linux and Nbtscan tools and these tools come pre-installed in Kali Linux.
Enumeration
1. Nbtscan
open your Terminal and type this command to see help menu:
nbtscan --help
for an example, we have a windows xp machine(on LAN). it has enabled NetBIOS service. now we will try to gather information from it.
type this command:
nbtscan -v <IP>
-v stands for verbose output. it will give shared folders INFO. you can then use smbclient tool to connect to that database(it is some other topic).
the same named tool in windows called nbtstat. you can use it with -A key like:
nbtstat -A <ip>
it will also give you the same result.
2. Enum4linux
this tool can grab users from NetBIOS service and can log in with default password.
use this command to see the help menu of Enum4linux
type this command:
enum4linux --help
now if we can see everything with this tool
type this command:
enum4linux -a <IP>
it will run every option from enum4linux list on the TARGET IP. but remember, it will fail if the password is not set to default.
but somehow you know the password, you can use it with this tool to see more Info.
type this command:
enum4linux -u <username> -p <password> -U <IP>
it will show you extra detail that might be useful for a hacker.
some basic keys:
-G to show groups
-s to show shares
-o to see the windows version
-v to verbose output
you can use the keys single or you can use these with the command that has username and password specified.
Thanks For Visiting
