Hacking port 139 windows 7

Port : Datagram mode is connectionless; the application is responsible for error detection and recovery. Port : Session mode lets two computers establish a connection, allows messages to span multiple packets, and provides error detection and recovery. Port It is used for SMB protocol server message block for sharing file between different operating system i. From the given image you can see that from the result of scan we found port is open for NetBIOS name services, moreover got MAC address of target system.

What will happen if the admin shares a folder in a network? Suppose we had given share permission to a specific folder for example ignite as shown in given image so that we can share that folder with another user in the local network then which port will involve in this process. Now you can observe that we have got a link for our shared folder. Using that link anyone can access this folder in that network, hence it means now a new port must be activated for establishing a connection in order to access a shared folder on another system, let find out it.

Now again taking the help of nmap for scanning the target one more time. From the result of scanning, you can observe that after sharing a folder we found port , and get activated. Hence only by sharing a single folder in the network, three ports get opened simultaneously in the target system for communication with another system.

As you can perceive we are sharing the image of victims control panel home which is showing his system basic information such as computer name, workgroup and etc. The same information can be enumerated with another system in that network using the following command:.

Hence you can read the information from inside NetBIOS remote machine name table we had enumerated the same information as shown in the above image. Phases of hacking Taking into consideration the approach to hack a particular machine we follow these steps: Reconnaissance: Scan target Get Access Maintain access Clear logs So basically we as hackers or even pen tester try to not just exploit using payloads like many script-kiddie but enumerate the victim machine and gather as much info as possible.

So let us use nmap to discover the IP Address and open ports of the victim machine. Lets try to know the services and their versions running on the remote machine we want to exploit.

Since we got port open and the OS as windows 7 , service and version. Let us try to enumerate with scripts available in nmap. This enables us to find if the machine is vulnerable to some attacks related to that particular service.

If you want to scan all ports for vulnerabilities you can also use nmap Let us now jump to the second step i. We use auxiliary for SMB Pentesting. These auxiliary contain scripts that help to scan and enumerate information about vulnerabilities in the target. We can easily get the idea of what an auxiliary is about. It helps to check for uninitialized variable vulnerability. Use it with rhost and run exploit. Followers 0. Reply to this topic Start new topic. Recommended Posts. Posted May 19, Hey I've got a doubt , is there any exploit in metasploit to exploit port ?

Link to comment Share on other sites More sharing options Mr-Protocol Posted May 20, Posted May 20, You don't exploit a port, you exploit the service running on that port. Today we will learn how to exploit this vulnerability using Metasploit, for this demonstration an intrusion test will be performed towards the Blue machine of the HackTheBox platform. Apparently, the team is running the SMB service with port We will continue listing this service, for this we will use nmap scripts specifically for the SMB service.

SMB, is a network protocol that allows files, printers and others services to be shared between nodes of a network of computers that use the Microsoft Windows operating system. Full Article.