nerdexam
EC-Council

312-50V9 · Question #343

Which among the following is a Windows command that a hacker can use to list all the shares to which the current user context has access?

The correct answer is B. NET USE. NET USE lists the current user's active network connections and mapped drives, making it a useful post-exploitation tool for enumerating accessible shares.

Enumeration

Question

Which among the following is a Windows command that a hacker can use to list all the shares to which the current user context has access?

Options

  • ANET FILE
  • BNET USE
  • CNET CONFIG
  • DNET VIEW

How the community answered

(24 responses)
  • B
    92% (22)
  • C
    4% (1)
  • D
    4% (1)

Why each option

NET USE lists the current user's active network connections and mapped drives, making it a useful post-exploitation tool for enumerating accessible shares.

ANET FILE

NET FILE lists open files and file locks on a server, not the shared resources accessible to the current user.

BNET USECorrect

NET USE displays all currently active network connections and mapped drives for the current user context, effectively listing every shared resource the user has established access to. An attacker running 'NET USE' can enumerate connected shares without triggering the same level of network-level queries as other commands. This makes it a common post-exploitation reconnaissance tool for lateral movement and privilege escalation.

CNET CONFIG

NET CONFIG displays workstation or server configuration settings such as computer name and software version, not share mappings.

DNET VIEW

NET VIEW lists shared resources broadly on a specified computer or domain and does not filter results to only those accessible by the current user context.

Concept tested: Windows NET USE command for share enumeration

Source: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/gg651155(v=ws.11)

Topics

#NET USE#Windows commands#network shares#SMB enumeration

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice