NetBIOS Name Enumeration
1 min read
Mar 16, 2026
NetBIOS over 137/UDP leaks hostnames, workgroups, and MACs on legacy networks.
nbtscan Discovery
Single host:
┌──(kali㉿kali)-[~]
└─$ nbtscan $TARGET_IP
Range sweep:
┌──(kali㉿kali)-[~]
└─$ nbtscan 192.168.1.0/24
Shows NetBIOS names and types.
nmblookup Query
Name resolution:
┌──(kali㉿kali)-[~]
└─$ nmblookup -A $TARGET_IP
Dumps full table including workgroup.
Was this helpful?
Your feedback helps improve this page.