> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.

# SMB Null Sessions

> Connecting to an SMB share without authentication.

# SMB Null Sessions

<p className="glossary-answer">Connecting to an SMB share without authentication.</p>

**Category:** [Reconnaissance](/en/glossary)

🎯 **Trench** — Connecting to an SMB share without authentication.
If null sessions are accepted, you can list shares, users, and
password policy without compromising anything yet.

🔗 **Kill chain** — Reconnaissance. Gives you: domain users (for
spraying), machine names, password policy (min length → optimal
dictionary).

📡 **Defensive footprint** — Event ID 4624 with `Logon Type 3` and
user `ANONYMOUS LOGON`. Trivial to detect; rarely enabled in 2025.

⚠️ **False friend** — Confusing `enum4linux` (which fails more
often than not) with `enum4linux-ng` (the modern Python version).

🛡️ **Remediation** — `RestrictAnonymous=2`, `RestrictAnonymousSAM=1` via GPO. Only
machines in the same domain should list users.

```bash theme={null}
# Unauthenticated recon
nxc smb 10.10.10.10 -u '' -p '' --shares
nxc smb 10.10.10.10 -u 'guest' -p '' --users
```

***

← [Back to the full glossary](/en/glossary)

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"DefinedTerm","name":"SMB Null Sessions","description":"Connecting to an SMB share without authentication.","inDefinedTermSet":{"@type":"DefinedTermSet","name":"Tactical pentesting glossary","url":"https://rootea.es/en/glossary"},"url":"https://rootea.es/en/glossary/smb-null-sessions"}`}
</script>

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://rootea.es/en"},{"@type":"ListItem","position":2,"name":"Tactical glossary","item":"https://rootea.es/en/glossary"},{"@type":"ListItem","position":3,"name":"SMB Null Sessions","item":"https://rootea.es/en/glossary/smb-null-sessions"}]}`}
</script>

*Last updated: 2026-06-11*