[New WTFBin]: NetBIOS over TCP

mttaggart / wtfbins

WTF are these binaries doing?! A list of benign applications that mimic malicious behavior.

MIT License

148 stars 12 forks source link

Closed super-phreak closed 2 years ago

super-phreak commented 2 years ago

Ductape and Dreams:
NetBIOS over TCP
Listens on random high ports and has machines all over the network connect at odd times.
https://winprotocoldoc.blob.core.windows.net/productionwindowsarchives/MS-NBTE/%5bMS-NBTE%5d.pdf

mttaggart commented 2 years ago

Completed with 0db326742d9ea11532cc8b7c763797272e89a1ef