1. Netbios and SMB Enumeration

It is used for file and printer sharing. port 137. Netbios name 16 characters. 15 chars define name and 16th character type of service. Port 137 is utilized by the NetBIOS Name service.

Note: Port 139 is used by SMB dialects that communicate over NetBIOS. Port 137 is utilized by the NetBIOS Name service.

A Little Guide to SMB EnumerationHacking Articles

1. Perform Netbios enumeration with windows command line

To check the name

nbtstat -a [Target IP Address]

To check the contents of Netbios cache

nbtstat -c

enumerate shares without creating share

net use

2. Netbios and SMB enumeration with Nmap NSE scripts

nmap -sV -v --script nbstat.nse [Target IP Address]
nmap -sU -p 137 --script nbstat.nse [Target IP Address]
nmap --script smb-os-discovery [Target IP Address]
nmap --script smb-enum-shares -p139,445 [Target IP Address]
nmap --script smb-vuln* [Target IP Address]