nerdexam
EC-Council

312-50V10 · Question #636

What is the following command used for? net use \targetipc$ "" /u:""

The correct answer is D. This command is used to connect as a null session. The command 'net use \\target\ipc$ "" /u:""' establishes a null session to the IPC$ share using blank credentials, enabling unauthenticated enumeration of a Windows host.

Enumeration

Question

What is the following command used for? net use \targetipc$ "" /u:""

Options

  • AGrabbing the etc/passwd file
  • BGrabbing the SAM
  • CConnecting to a Linux computer through Samba.
  • DThis command is used to connect as a null session
  • EEnumeration of Cisco routers

How the community answered

(20 responses)
  • A
    5% (1)
  • C
    10% (2)
  • D
    85% (17)

Why each option

The command 'net use \\target\ipc$ "" /u:""' establishes a null session to the IPC$ share using blank credentials, enabling unauthenticated enumeration of a Windows host.

AGrabbing the etc/passwd file

Grabbing /etc/passwd is a Linux-specific operation and has no relation to the Windows IPC$ share or the net use command.

BGrabbing the SAM

Retrieving the SAM database requires direct file access or specific exploitation techniques; a null session connection alone does not copy the SAM file.

CConnecting to a Linux computer through Samba.

Samba connections to Linux hosts use a different syntax and context; this command targets the Windows IPC$ share, not a Linux Samba share.

DThis command is used to connect as a null sessionCorrect

The IPC$ (Inter-Process Communication) share in Windows allows named-pipe connections used for remote administration and enumeration. Supplying empty strings for both the password and the username (/u:"") instructs Windows to connect anonymously, which is known as a null session. A successful null session can allow an attacker to enumerate shares, user accounts, groups, and other resources without requiring valid credentials.

EEnumeration of Cisco routers

Cisco router enumeration involves SNMP or other network-device-specific protocols and is unrelated to the Windows net use command.

Concept tested: Windows null session IPC$ anonymous enumeration

Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/inter-process-communication-share-null-session

Topics

#null session#IPC$ share#Windows enumeration#net use command

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice