Microsoft Windows SMB Service Enumeration via \srvsvc

This plugin connects to \srvsvc instead of \svcctl to enumerate the list of services running on the remote host on top of a NULL session. An attacker may use this feature to gain better knowledge of the remote host. C Tenable Network Security, Inc. Thanks to: Jean-Baptiste Marchand of Herve Schau...

Microsoft Windows SMB Service Detection

The remote service understands the CIFS Common Internet File System or Server Message Block SMB protocol, used to provide shared access to files, printers, etc between nodes on a network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11011; scriptversion"1.43";...

Microsoft Windows 9x - File Handle Buffer Overflow

Microsoft Windows 9x - File Handle Buffer Overflow // source: https://www.securityfocus.com/bid/1796/info The file sharing SMB service in Windows enables client applications to access and modify files from a server on the network. The SMB service within Windows 95/98 allocates 0x4004 bytes to sto...

Microsoft Windows 9x - File Handle Buffer Overflow

// source: https://www.securityfocus.com/bid/1796/info The file sharing SMB service in Windows enables client applications to access and modify files from a server on the network. The SMB service within Windows 95/98 allocates 0x4004 bytes to store file handles. Therefore, a file handle returned ...

Microsoft Windows SMB Service Enumeration

This plugin implements the SvcOpenSCManager and SvcEnumServices calls to obtain, using the SMB protocol, the list of active and inactive services of the remote host. An attacker may use this feature to gain better knowledge of the remote host. C Tenable, Inc. include"compat.inc"; if description...

anonymous SMB service DoS on nt5 (and TCP DoS on nt4)

been aware of a DoS attack against NT that i originally thought was SMB-related, for well over a year, now. source code has been available for this length of time, too. what you do is send SMB requests without reading the responses back. i originally thought that you had to send SMBtrans IPC$...