nerdexam
EC-Council

312-50V11 · Question #477

Which among the following is a Windows command that a hacker can use to list all the shares to which the current user context has access?

The correct answer is B. NET USE. The NET USE command lists active network share connections established under the current user's credentials, making it useful for enumerating authenticated share access.

Enumeration

Question

Which among the following is a Windows command that a hacker can use to list all the shares to which the current user context has access?

Options

  • ANET FILE
  • BNET USE
  • CNET CONFIG
  • DNET VIEW

How the community answered

(30 responses)
  • A
    7% (2)
  • B
    90% (27)
  • D
    3% (1)

Why each option

The NET USE command lists active network share connections established under the current user's credentials, making it useful for enumerating authenticated share access.

ANET FILE

NET FILE lists files that remote users have opened on the local server and is an administrative command for managing open file handles, not for enumerating share access.

BNET USECorrect

Running NET USE without parameters displays all currently connected network shares and mapped drives that are authenticated under the current user's security context, directly revealing which shares the user can access - information an attacker can leverage to understand the scope of available network resources.

CNET CONFIG

NET CONFIG displays the configuration of the Workstation or Server service (such as computer name and username), not a list of accessible network shares.

DNET VIEW

NET VIEW lists resources advertised on a remote computer or domain without regard to the current user's permissions, so it shows available shares broadly rather than those specifically accessible to the current user context.

Concept tested: Windows NET USE command for network share enumeration

Source: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/net-use

Topics

#NET USE#Windows enumeration#network shares#SMB

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice