Null Session

From: Wbsony (wbsony@gmail.com)
Date: Sun Mar 06 2005 - 07:54:52 EST

• Next message: Davi Ottenheimer: "Re: Testing large networks"
• Previous message: Yuri Demchenko: "Re: eBanking Security Testing (network and application) Methodology Released"
• Next in thread: H D Moore: "Re: Null Session"
• Reply: H D Moore: "Re: Null Session"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hi all,

Recently, I did some testing on Windows hosts, and found things that
confused me.

When I ran:

c:\>net use \\host\IPC$ "" /u:administrator
The command completed successfully.

It was successful, then I can connect to the registry of that particular
host remotely.

At first, I thought it was because administrator's password was simply empty
password.
However, when I ran similar command, with user name that didn't exist in the
system, same result occured:

c:\>net use \\host\IPC$ "" /u:blablabla
The command completed successfully.

I thought maybe just null session issues, but the null session connection
was unsuccessful:

net use \\host\IPC$ "" /u:""

(Sorry, I forgot the actual results shown, some kind of 'error occured'
message).

Anybody encountered this situation before and could enlighten me?

Thanks in advance,
Wbsony

• Next message: Davi Ottenheimer: "Re: Testing large networks"
• Previous message: Yuri Demchenko: "Re: eBanking Security Testing (network and application) Methodology Released"
• Next in thread: H D Moore: "Re: Null Session"
• Reply: H D Moore: "Re: Null Session"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:17 EDT