nerdexam
GIAC

GPEN · Question #274

Which of the following is the correct syntax to create a null session?

The correct answer is C. c:\>net use \\IP_addr\IPC$ "" /u: "". A null session is an anonymous, unauthenticated connection to a Windows IPC$ (Inter-Process Communication) share, historically used for enumeration attacks. The correct command is 'net use' - not 'net view'. 'net use' establishes a network connection (session), while 'net view'…

Exploitation & Post-Exploitation Techniques

Question

Which of the following is the correct syntax to create a null session?

Options

  • Ac:>net view \IP_addr\IPC$ "" /u: ""
  • Bc:>net view \IPC$\IP_addr "" /u: ""
  • Cc:>net use \IP_addr\IPC$ "" /u: ""
  • Dc:>net use \IPC$\IP_addr "" /u: ""

How the community answered

(66 responses)
  • A
    6% (4)
  • B
    3% (2)
  • C
    79% (52)
  • D
    12% (8)

Explanation

A null session is an anonymous, unauthenticated connection to a Windows IPC$ (Inter-Process Communication) share, historically used for enumeration attacks. The correct command is 'net use' - not 'net view'. 'net use' establishes a network connection (session), while 'net view' only lists shared resources without creating a session. The path must follow the format \IP_addr\IPC$ (target IP first, then the share name). The empty double quotes ('""') represent a blank password, and '/u: ""' specifies an anonymous (null) username. Option D has the path reversed (IPC$ before IP), and Options A/B use 'net view' which is incorrect for creating a session.

Topics

#null session#IPC$#net use command#Windows enumeration

Community Discussion

No community discussion yet for this question.

Full GPEN Practice