Ch 3 - Enumeration

Quiz and Answers

1. What is the “holy grail” to hackers?

NetBIOS / SMB / Null NetBIOS Session

2. What is the main information you can get from a banner grab?

Server software and version

3. Name the two things you need to do to secure the Finger leak?

Disable service and block port

4. What service if set to use a standard community string will return lots of information to any one?

SNMP

5. What two ways can you use to stop access to RPC?

Limit to authenticated users and/or use encryption

(some of these are Linux, others are Windows)

nc -v www.scotnpatti.com 80
    HEAD / HTTP/1.0 (press enter)
       (press enter)

www.scotnpatti.com   (bad)
www.cs.southern.edu  (good)

telnet email.scotnpatti.com
    vrfy root
    vrfy scot
    vrfy jane

dig @peter.cs.andrews.edu southern.edu axfr 
//works here, but may not work elsewhere

dig @ns1.someuniversitythatdoesen'texist.edu version.bind txt chaos