What is NetBIOS?
NetBIOS provides legacy Windows naming and session services, commonly tied to SMB discovery and access.
Common security issues
Hostname and domain or workgroup information disclosure
SMB access over 139 when 445 is restricted
Legacy protocol exposure enabling easier network reconnaissance
Weak segmentation around Windows file-sharing infrastructure
Enumeration
Pull hostnames, domain names, and role hints via NetBIOS name tables
NetBIOS Session Enumeration
Enumerate active NetBIOS sessions over TCP/445 to identify logged-in users, remote hosts, and active connections using tools like nbtstat and enum4linux.
Vulnerability Discovery
Guides on finding info leaks via NetBIOS enumeration