Script smb-mbenum

Script types: hostrule
Categories: discovery, safe
Download: https://svn.nmap.org/nmap/scripts/smb-mbenum.nse

Script Summary

Queries information managed by the Windows Master Browser.

Script Arguments

smb-mbenum.format

(optional) if set, changes the format of the result returned by the script. There are three possible formats: 1. Ordered by type horizontally 2. Ordered by type vertically 3. Ordered by type vertically with details (default)

smb-mbenum.domain

(optional) if not specified, lists the domain of the queried browser

smb-mbenum.filter

(optional) if set, queries the browser for a specific type of server (@see ServerTypes)

randomseed, smbbasic, smbport, smbsign

See the documentation for the smb library.

smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername

See the documentation for the smbauth library.

Example Usage

nmap -p 445 <host> --script smb-mbenum

Script Output 

| smb-mbenum:
|   Backup Browser
|     WIN2K3-EPI-1  5.2  EPiServer 2003 frontend server
|   DFS Root
|     WIN2K3-1      5.2  MSSQL Server backend
|     WIN2K3-EPI-1  5.2  EPiServer 2003 frontend server
|   Master Browser
|     WIN2K3-EPI-1  5.2  EPiServer 2003 frontend server
|   SQL Server
|     WIN2K3-EPI-1  5.2  EPiServer 2003 frontend server
|   Server
|     TIME-CAPSULE  4.32  Time Capsule
|     WIN2K3-1      5.2   MSSQL Server backend
|     WIN2K3-EPI-1  5.2   EPiServer 2003 frontend server
|   Server service
|     TIME-CAPSULE  4.32  Time Capsule
|     WIN2K3-1      5.2   MSSQL Server backend
|     WIN2K3-EPI-1  5.2   EPiServer 2003 frontend server
|   Windows NT/2000/XP/2003 server
|     TIME-CAPSULE  4.32  Time Capsule
|     WIN2K3-1      5.2   MSSQL Server backend
|     WIN2K3-EPI-1  5.2   EPiServer 2003 frontend server
|   Workstation
|     TIME-CAPSULE  4.32  Time Capsule
|     WIN2K3-1      5.2   MSSQL Server backend
|_    WIN2K3-EPI-1  5.2   EPiServer 2003 frontend server

Requires

Author:

  • Patrik Karlsson

License: Same as Nmap--See https://nmap.org/book/man-legal.html