NAT(1)

💖 NAT(1) — NetBIOS Auditing Tool 💖

okay bestie, welcome to the group chat, we're talking about smb-nat from the General Commands Manual section NAT(1), and honestly? it's giving security-audit main character energy. let's get into it ✨

---

🌸 NAME 🌸

smb-nat — the NetBIOS Auditing Tool. that's the whole vibe. 🎀

---

🦋 SYNOPSIS 🦋

smb-nat [-d <debuglevel>] [-o <output>] [-u <userlist>] [-p <passlist>]
<address>

like, you hand it an address and some optional little files and it goes to work. periodt. 💅

---

✨ DESCRIPTION ✨

so smb-nat is a tool that was written to run a bunch of security checks on systems that are out here offering the NetBIOS file sharing service. that's the assignment. 🔥

what it does, step by step, no cap:

• it will try to retrieve all information availible from the remote server (yes, "availible", we're keeping it, that's the original spelling and we don't fix what we love 🫶)
• and it will try to access any services provided by the server

literally it just walks up and starts asking questions. iconic behavior, honestly. 😭

---

👑 OPTIONS 👑

• -o — specify the output file. all results from the scan get written to the file you name, in addition to standard output. so you get the tea twice, once on your screen and once in the file 💖
• -u — specify the file to read usernames from. usernames get read from that file when it's attempting to guess the password on the remote server. usernames should appear one per line in the file you specify. a sample username file is chilling at /usr/share/smb-nat/userlist.txt 🎀
• -p — specify the file to read passwords from. passwords get read from that file when it's attempting to guess the password on the remote server. passwords should appear one per line in the file you specify. a sample password file lives at /usr/share/smb-nat/passlist.txt 🌸
• <address> — addresses should be specified in comma deliminated format, with no spaces. (again, "deliminated" — original flavor, we respect it 🫶) valid address specifications include:
  • hostname, — "hostname" is added
  • 127.0.0.1-127.0.0.3, — adds addresses 127.0.0.1 through 127.0.0.3
  • 127.0.0.1-3, — adds addresses 127.0.0.1 through 127.0.0.3
  • 127.0.0.1-3,7,10-20, — adds addresses 127.0.0.1 through 127.0.0.3, 127.0.0.7, 127.0.0.10 through 127.0.0.20.
  • hostname,127.0.0.1-3, — adds "hostname" and 127.0.0.1 through 127.0.0.1

all combinations of hostnames and address ranges as specified above are valid 💯

---

🌈 the default lists (if you don't bring your own) 🌈

if no userlist or password list files are specified on the command line, a small set of defaults is used. this list includes the following:

Usernames

"ADMINISTRATOR", "GUEST", "BACKUP", "ROOT", "ADMIN", "USER", "DEMO",
"TEST", "SYSTEM", "OPERATOR", "OPER", "LOCAL"

Passwords

"ADMINISTRATOR", "GUEST", "ROOT", "ADMIN", "PASSWORD", "TEMP",
"SHARE", "WRITE", "FULL", "BOTH", "READ", "FILES", "DEMO", "TEST",
"ACCESS", "USER", "BACKUP", "SYSTEM", "SERVER", "LOCAL"

---

⚠️ bestie, listen to me for a sec. the password guessing routines are written in such a way that all passwords are tried for all usernames. keep this in mind when using larger lists of passwords and usernames, because the time required increases exponentially with the size of these lists. that's not a cute lil linear growth situation, that's exponential. do not come crying to me at hour six. 😭💀

---

🧚 SUPPORTED PLATFORMS 🧚

this version of smb-nat has been tested against Windows NT 4.0 and various versions of the Samba server written by Andrew Tridgell. respect the legends 🫶

and this version of smb-nat has been tested and compiled on the following operating systems:

• Solaris 2.5
• Linux 2.0
• FreeBSD 2.1.5
• OpenBSD 2.0
• BSDI 2.1
• Windows NT 4.0
• Windows 95

look at that range. it's giving "will run literally anywhere" energy. 👑

---

🍓 FILES 🍓

• smb-nat
• /usr/share/smb-nat/userlist.txt
• /usr/share/smb-nat/passlist.txt

(the path got hyphen-wrapped in the original as /usr/share/smb- + nat/passlist.txt — it's one path, bestie, don't let the line break gaslight you 💖)

---

that's the whole page!! slay, you now know smb-nat better than most people know their own wifi password 💅✨

signing off from the General Commands Manual, page NAT(1) — that's the source, that's the version, that's the footer, and yes she ate 🎀💜