Agenda

• Introduction to NULL sessions

• NULL sessions internals

• Tools to exploit NULL sessions

• NULL sessions restrictions

• Default NULL session restrictions on Windows systems

  • Windows 2000
  • Windows XP (SP0, SP1a), Windows XP SP2
  • Windows Server 2003, Windows Server 2003 SP1
  • Active Directory domain controllers

• Hardening recommendations

• Conclusion