# Vulnerability Discovery

> Guides on finding info leaks via NetBIOS enumeration

- **URL:** https://hackindex.io/services/netbios/vulnerability-discovery
- **Service:** [NetBIOS](https://hackindex.io/services/netbios.md)
- **Published:** 2026-03-30
- **Updated:** 2026-03-30

NetBIOS vulnerability discovery targets legacy name resolution and session weaknesses on ports 137-139. Null session access through IPC$ allows unauthenticated enumeration of users, groups, shares, and password policies on older Windows systems.

Exposed NetBIOS name services enable name resolution poisoning for credential interception. Check for open file shares accessible without authentication and systems responding to NetBIOS broadcasts, which indicate opportunities for LLMNR/NBT-NS poisoning attacks.

## Guides

- [NetBIOS Information Disclosure](https://hackindex.io/services/netbios/vulnerability-discovery/netbios-information-disclosure.md)