issues
search
mttaggart
/
wtfbins
WTF are these binaries doing?! A list of benign applications that mimic malicious behavior.
MIT License
148
stars
12
forks
source link
[New WTFBin]: NetBIOS over TCP
#4
Closed
super-phreak
closed
2 years ago
super-phreak
commented
2 years ago
Ductape and Dreams:
NetBIOS over TCP
Listens on random high ports and has machines all over the network connect at odd times.
https://winprotocoldoc.blob.core.windows.net/productionwindowsarchives/MS-NBTE/%5bMS-NBTE%5d.pdf
mttaggart
commented
2 years ago
Completed with 0db326742d9ea11532cc8b7c763797272e89a1ef