nerdexam
GIAC

GSNA · Question #256

Which TCP and UDP ports can be used to start a NULL session attack in NT and 2000 operating systems?

The correct answer is C. 139 and 445. A null session is an anonymous connection to a freely accessible network share called IPC$ on Windows-based servers. It allows immediate read and write access with Windows NT/2000 and read-access with Windows XP and 2003. The command to be inserted at the DOS- prompt is as…

Design infrastructure solutions

Question

Which TCP and UDP ports can be used to start a NULL session attack in NT and 2000 operating systems?

Options

  • A149 and 133
  • B203 and 333
  • C139 and 445
  • D198 and 173

How the community answered

(48 responses)
  • A
    4% (2)
  • B
    17% (8)
  • C
    73% (35)
  • D
    6% (3)

Explanation

A null session is an anonymous connection to a freely accessible network share called IPC$ on Windows-based servers. It allows immediate read and write access with Windows NT/2000 and read-access with Windows XP and 2003. The command to be inserted at the DOS- prompt is as follows: net use \IP address_or_host name\ipc$ "" "/user:" net use Port numbers 139 TCP and 445 UDP can be used to start a NULL

Topics

#NULL session attack#SMB#Windows security#network ports

Community Discussion

No community discussion yet for this question.

Full GSNA Practice