hi all. i am quite familiar with almost all aspects of windows services, mainly NETBIOS/MSRPC, but the above service has eluded me for awhile now. i have never been able to find a tool out there than can query any info from this port. i know the service offers info because i have read up on it. you should have the ability to query for DC information such as browser elections/master browser lists/etc
the only tool i have that seems like it might work is one called NLTEST (used for DC mgmt). this might be able to create the packets i am looking for. other than that, nmap and the various scanners/packet tools have nothing to interact with this port
do any of you know know much about pulling info directly from a DC through port 138?
i am mainly interested in what can done w/ a windows domain. port 138 manages some important parts to that---mainly the list for the DC and its backups, as well as controlling the mailsots for browser elections. i have read that one can force a browser list to stop advertising, and can even be forced to longer register w/ elections (for who becomes MB). port 138 is the service that handles this. i am already very familiar w/ the dealings of port 139/445 and 137. i was simply curious, because i have yet to ever see one pull data from this port