312-50V9 · Question #343
Which among the following is a Windows command that a hacker can use to list all the shares to which the current user context has access?
The correct answer is B. NET USE. NET USE lists the current user's active network connections and mapped drives, making it a useful post-exploitation tool for enumerating accessible shares.
Question
Which among the following is a Windows command that a hacker can use to list all the shares to which the current user context has access?
Options
- ANET FILE
- BNET USE
- CNET CONFIG
- DNET VIEW
How the community answered
(24 responses)- B92% (22)
- C4% (1)
- D4% (1)
Why each option
NET USE lists the current user's active network connections and mapped drives, making it a useful post-exploitation tool for enumerating accessible shares.
NET FILE lists open files and file locks on a server, not the shared resources accessible to the current user.
NET USE displays all currently active network connections and mapped drives for the current user context, effectively listing every shared resource the user has established access to. An attacker running 'NET USE' can enumerate connected shares without triggering the same level of network-level queries as other commands. This makes it a common post-exploitation reconnaissance tool for lateral movement and privilege escalation.
NET CONFIG displays workstation or server configuration settings such as computer name and software version, not share mappings.
NET VIEW lists shared resources broadly on a specified computer or domain and does not filter results to only those accessible by the current user context.
Concept tested: Windows NET USE command for share enumeration
Source: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/gg651155(v=ws.11)
Topics
Community Discussion
No community discussion yet for this question.