Have an account?
It looks like you're new here. If you want to get involved, click one of these buttons!
Apply for Membership
Who's Online (1)
Looking to introduce yourself? Look no further, and click here! We also have IRC! [irc.evilzone.org #iexploit]
help with port 138 (Datagram Service)
hi all. i am quite familiar with almost all aspects of windows services, mainly NETBIOS/MSRPC, but the above service has eluded me for awhile now. i have never been able to find a tool out there than can query any info from this port. i know the service offers info because i have read up on it. you should have the ability to query for DC information such as browser elections/master browser lists/etc
the only tool i have that seems like it might work is one called NLTEST (used for DC mgmt). this might be able to create the packets i am looking for. other than that, nmap and the various scanners/packet tools have nothing to interact with this port
do any of you know know much about pulling info directly from a DC through port 138?
I don't know why you are worrying too much about the NETBIOS service?
From your post it seems you are trying to focus more about the NETBIOS,but may i ask 1 thing?
Tell me at the end what you gonna achieve?
Also as far as i know,ports ranging from 135-139 uses NETBIOS,if you would like to tell what exactly you gonna do,then we can help a bit more..
i am mainly interested in what can done w/ a windows domain. port 138 manages some important parts to that---mainly the list for the DC and its backups, as well as controlling the mailsots for browser elections. i have read that one can force a browser list to stop advertising, and can even be forced to longer register w/ elections (for who becomes MB). port 138 is the service that handles this. i am already very familiar w/ the dealings of port 139/445 and 137. i was simply curious, because i have yet to ever see one pull data from this port
Add a Comment