Exploiting Windows networking

There are many networking protocols that Windows supports, offering the potential for abuse. This might come from how Microsoft implemented them or just how they are implemented in the environment. Some of the key network protocols include the Address Resolution Protocol (ARP), Simple Network Management Protocol (SNMP), Server Message Block (SMB), and NetBIOS. Let’s discuss these in detail in the following sections.

Address Resolution Protocol

ARP is a protocol that connects network devices to a network switch by matching their media access control (MAC) address assigned to the network interface card (NIC) to their internet protocol (IP) address assigned by the network. Without ARP, a host is not able to get the hardware address of the host they are attempting to communicate with. The LAN keeps a table that maps IP addresses to the MAC addresses of the different devices. This is known as a content-addressable memory (CAM) table, which includes...