> For the complete documentation index, see [llms.txt](https://ceh-practical.cavementech.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ceh-practical.cavementech.com/module-4.-enumeration/1.-netbios-enumeration-port-137.md). # 1. Netbios Enumeration (Port 137) NetBIOS stands for Network Basic Input Output System. Windows uses NetBIOS for file and printer sharing. A NetBIOS name is a unique computer name assigned to Windows systems, comprising a 16-character ASCII string that identifies the network device over TCP/IP. The first 15 characters are used for the device name, and the 16th is reserved for the service or name record type. {% embed url="" %} {% hint style="info" %} Port **139** is used by **SMB** dialects that communicate over NetBIOS. Port **137** is utilized by the **NetBIOS Name service**. {% endhint %} ## 1. Perform Netbios enumeration with windows command line check the name ``` nbtstat -a 192.168.18.110 ```

check the contents of Netbios cache ``` nbtstat -c ```

enumerate shares without creating share ``` net use ```

## 2. Netbios enumerator Windows application {% embed url="" %}

## 3. Netbios enumeration with NSE scripts ``` nmap -sV -v --script nbstat.nse 192.168.18.110 ```

``` nmap -sU -p 137 --script nbstat.nse 192.168.18.110 ``` {% embed url="" %}