A null user is a special connection made to a Windows system without providing a username or password. In older versions of Windows (NT, 2000, XP), null sessions could be used to anonymously connect to IPC$ share and enumerate:
Users
Groups
Shares
Policies
From CEH v13 Courseware:
Module 4: Enumeration → Null Sessions
CEH v13 Study Guide states:
“Null users are unauthenticated sessions used to access certain system resources without credentials. These are commonly used in enumeration attacks.”
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit