nerdexam
EC-Council

312-50V11 · Question #636

What is the following command used for? net use \targetipc$ "" /u:""

The correct answer is D. This command is used to connect as a null session. The command net use \target\ipc$ "" /u:"" establishes a Windows null session by connecting to the IPC$ share with an empty username and password, enabling unauthenticated enumeration of system resources.

Enumeration

Question

What is the following command used for? net use \targetipc$ "" /u:""

Options

  • AGrabbing the etc/passwd file
  • BGrabbing the SAM
  • CConnecting to a Linux computer through Samba.
  • DThis command is used to connect as a null session
  • EEnumeration of Cisco routers

How the community answered

(42 responses)
  • A
    5% (2)
  • C
    2% (1)
  • D
    86% (36)
  • E
    7% (3)

Why each option

The command `net use \target\ipc$ "" /u:""` establishes a Windows null session by connecting to the IPC$ share with an empty username and password, enabling unauthenticated enumeration of system resources.

AGrabbing the etc/passwd file

The `/etc/passwd` file is a Linux/Unix construct and is not accessible via Windows SMB `net use` commands targeting a Windows IPC$ share.

BGrabbing the SAM

The SAM database cannot be directly retrieved through a null session alone; additional exploitation steps are required after initial enumeration.

CConnecting to a Linux computer through Samba.

This is a Windows-native SMB command targeting a Windows IPC$ share, not a Samba connection to a Linux system.

DThis command is used to connect as a null sessionCorrect

The `net use` command targeting the IPC$ (Inter-Process Communication) share with an empty password and empty username (`/u:""`) creates a null session - an unauthenticated SMB connection to a Windows host. Null sessions historically allowed attackers to anonymously enumerate user accounts, groups, shares, and registry information from the target system without valid credentials.

EEnumeration of Cisco routers

This command is entirely unrelated to Cisco router enumeration, which relies on protocols such as SNMP or CDP rather than Windows SMB.

Concept tested: Windows null session attack via IPC$ share

Source: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc978012(v=technet.10)

Topics

#null session#IPC$#net use#Windows enumeration

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice