nerdexam
GIAC

GCIH · Question #805

Using the command below, to which share will the user be connected on 192.168.99.10? C:\> net use \\192.168.99.10

The correct answer is D. IPC$. Running net use \\192.168.99.10 without specifying a share name causes Windows to connect to the IPC$ hidden share, which is used for inter-process communication and named pipe access.

Reconnaissance, Scanning, and Enumeration

Question

Using the command below, to which share will the user be connected on 192.168.99.10? C:> net use \192.168.99.10

Options

  • AC$
  • BADMIN$
  • CSMB$
  • DIPC$

How the community answered

(53 responses)
  • A
    6% (3)
  • B
    2% (1)
  • C
    2% (1)
  • D
    91% (48)

Why each option

Running `net use \\192.168.99.10` without specifying a share name causes Windows to connect to the IPC$ hidden share, which is used for inter-process communication and named pipe access.

AC$

C$ is the default administrative share for the root of the C drive and requires explicit specification as `\\192.168.99.10\C$` to connect to it.

BADMIN$

ADMIN$ is the administrative share mapped to the Windows installation directory and must also be explicitly named in the net use command to establish a connection to it.

CSMB$

SMB$ is not a standard or default Windows administrative share and does not exist natively on Windows systems.

DIPC$Correct

When no share name is appended to the UNC path in a `net use` command, Windows defaults to connecting to the IPC$ (Inter-Process Communication) share. IPC$ is a special hidden share present on all Windows systems that provides access to named pipes and is used for authentication handshakes, remote enumeration, and null session queries - making it a common target during Windows network reconnaissance.

Concept tested: Windows IPC$ share default net use connection behavior

Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/inter-process-communication-share-null-session

Topics

#net use#IPC$#Windows admin shares#SMB

Community Discussion

No community discussion yet for this question.

Full GCIH Practice