312-50V13 · Question #289
Allen, a professional pen tester, was hired by xpertTech solutWns to perform an attack simul- ation on the organization's network resources. To perform the attack, he took advantage of the NetBIOS…
The correct answer is C. <03>. The NetBIOS name code <03> is specifically associated with the Messenger service, which indicates the username of the logged-in user.
Question
Options
- A<1B>
- B<00>
- C<03>
- D<20>
How the community answered
(20 responses)- A10% (2)
- B5% (1)
- C85% (17)
Why each option
The NetBIOS name code `<03>` is specifically associated with the Messenger service, which indicates the username of the logged-in user.
The NetBIOS code `<1B>` typically refers to the Domain Master Browser or the Domain Name, not the Messenger service.
The NetBIOS code `<00>` is commonly used for a Workstation Service or a unique computer name.
During NetBIOS enumeration, specific hexadecimal codes are used to identify different services or resources. The `<03>` NetBIOS code, when appended to a NetBIOS name, signifies the 'Messenger service' or a 'user logged on' to the workstation. This code is commonly sought by penetration testers to identify active users on a system, which can be valuable for further social engineering or targeted attacks.
The NetBIOS code `<20>` is typically associated with the File Server Service, indicating a server that can share files, not the Messenger service.
Concept tested: NetBIOS enumeration codes
Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/netbios-name-query-response-codes
Topics
Community Discussion
No community discussion yet for this question.