GPEN · Question #274
Which of the following is the correct syntax to create a null session?
The correct answer is C. c:\>net use \\IP_addr\IPC$ "" /u: "". A null session is an anonymous, unauthenticated connection to a Windows IPC$ (Inter-Process Communication) share, historically used for enumeration attacks. The correct command is 'net use' - not 'net view'. 'net use' establishes a network connection (session), while 'net view'…
Question
Which of the following is the correct syntax to create a null session?
Options
- Ac:>net view \IP_addr\IPC$ "" /u: ""
- Bc:>net view \IPC$\IP_addr "" /u: ""
- Cc:>net use \IP_addr\IPC$ "" /u: ""
- Dc:>net use \IPC$\IP_addr "" /u: ""
How the community answered
(66 responses)- A6% (4)
- B3% (2)
- C79% (52)
- D12% (8)
Explanation
A null session is an anonymous, unauthenticated connection to a Windows IPC$ (Inter-Process Communication) share, historically used for enumeration attacks. The correct command is 'net use' - not 'net view'. 'net use' establishes a network connection (session), while 'net view' only lists shared resources without creating a session. The path must follow the format \IP_addr\IPC$ (target IP first, then the share name). The empty double quotes ('""') represent a blank password, and '/u: ""' specifies an anonymous (null) username. Option D has the path reversed (IPC$ before IP), and Options A/B use 'net view' which is incorrect for creating a session.
Topics
Community Discussion
No community discussion yet for this question.