NBNS
Last updated
Last updated
Link: очень подробно про NetBIOS и NBNS:
NetBIOS Name Service — устаревший протокол, но где-то еще работает
Работает над UDP (обычно)
src/dst port 137
Посмотреть записи на локальной машине:
Also, it must taked into account that NBNS is not used if any other protocol can resolve the name request. The order of preference is the following:
DNS
mDNS
LLMNR
NBNS
It must be noted that, in case of a broadcast request, any computer can respond to the query, so it allows to an attacker to impersonate the real computer. This is one of the tactics followed by and to collect NTLM hashes.
Furthermore, it is possible to use this capability to perform a NetBIOS scan in a network and discover machines and services. This can be accomplished with or nmap script , from both Windows or Linux.