Wednesday, June 20, 2007

Fake NetBIOS Tool - Simulate Windows Hosts

clipped from www.darknet.org.uk

Some cool free tools made by folks from the French Honeynet Project.

FakeNetBIOS is a family of tools designed to simulate Windows hosts on a LAN. The individual tools are:

  • FakeNetbiosDGM (NetBIOS Datagram)
  • FakeNetbiosNS (NetBIOS Name Service)
  • Each tool can be used as a standalone tool or as a honeyd responder or subsystem.

    FakeNetbiosDGM sends NetBIOS Datagram service packets on port UDP 138 to simulate Windows hosts bradcasts. It sends periodically NetBIOS announces over the network to simulate Windows computers. It fools the Computer Browser services running over the LAN and so on.

    FakeNetbiosNS is a NetBIOS Name Service daemon, listening on port UDP 137. It responds to NetBIOS Name requests like real Windows computers: for example ‘ping -a’, ‘nbtstat -A’ and ‘nbtstat -a’, etc.

    You can download the tools here:

    FakeNetBIOS-0.91.zip

    There are a few others things here:

    http://honeynet.rstack.org/tools.php

    blog it

    No comments: