NetBIOS Information Disclosure
Mar 30, 2026
•
3 min read
NetBIOS:
Vulnerability Discovery
Guides on finding info leaks via NetBIOS enumeration
1 guide
•
Created Mar 30, 2026
•
Updated Mar 30, 2026
NetBIOS vulnerability discovery targets legacy name resolution and session weaknesses on ports 137-139. Null session access through IPC$ allows unauthenticated enumeration of users, groups, shares, and password policies on older Windows systems.
Exposed NetBIOS name services enable name resolution poisoning for credential interception. Check for open file shares accessible without authentication and systems responding to NetBIOS broadcasts, which indicate opportunities for LLMNR/NBT-NS poisoning attacks.