winfo
What is winfo?
"winfo" uses null sessions to remotely retrieve a list of user accounts, workstation trust accounts, interdomain trust accounts, server trust accounts, and shares, from Windows NT. It also identifies the built-in Administrator and Guest accounts, even if their names have been changed. Of course winfo will show all hidden shares.
Name a feature that makes winfo extra useful.
One of the features is the -n switch, which activates null session mode. Without this switch, winfo can be used to retrieve the information mentioned, but using an already established connection to the other computer. For example, if null sessions have been restricted but you have a valid user account, you can connect first and then use winfo to retrieve the information you need.
How do I use this tool?
Download the exe file and run it from the Command Prompt. It will give you the instructions you need.
Which OS's are supported?
Windows NT 4.0 and Windows 2000.
What if there is a problem?
Then check out the winfo FAQ.
So where can I find the exe file?
You can download it right here.