312-50V11 · Question #477
Which among the following is a Windows command that a hacker can use to list all the shares to which the current user context has access?
The correct answer is B. NET USE. The NET USE command lists active network share connections established under the current user's credentials, making it useful for enumerating authenticated share access.
Question
Which among the following is a Windows command that a hacker can use to list all the shares to which the current user context has access?
Options
- ANET FILE
- BNET USE
- CNET CONFIG
- DNET VIEW
How the community answered
(30 responses)- A7% (2)
- B90% (27)
- D3% (1)
Why each option
The NET USE command lists active network share connections established under the current user's credentials, making it useful for enumerating authenticated share access.
NET FILE lists files that remote users have opened on the local server and is an administrative command for managing open file handles, not for enumerating share access.
Running NET USE without parameters displays all currently connected network shares and mapped drives that are authenticated under the current user's security context, directly revealing which shares the user can access - information an attacker can leverage to understand the scope of available network resources.
NET CONFIG displays the configuration of the Workstation or Server service (such as computer name and username), not a list of accessible network shares.
NET VIEW lists resources advertised on a remote computer or domain without regard to the current user's permissions, so it shows available shares broadly rather than those specifically accessible to the current user context.
Concept tested: Windows NET USE command for network share enumeration
Source: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/net-use
Topics
Community Discussion
No community discussion yet for this question.