Learn How to Enumerate Hosts and Domains of LAN using Net Commands

1. The net commands are used to enumerate information from the Local Area Network (LAN).
2. Once a NULL session has been established, any shares these hosts will be displayed as well.
3. Create null session first as mentoined in old posts.
4. Run the syntax: net
5. From a DOS prompt, type the syntax: net view
6. This technique only works on the LAN and not on the Internet. Type command syntax: net view /domain

To identify the hosts within each domain, the syntax would be: net view /domain:domain name

To view the nonhidden shares available: net view \\Target IP Address

If you find you are not obtaining the results desired, try initiating a NULL session to the target.