A
null session establishes an unauthenticated SMB connection to enumerate Windows users, groups, shares, and policies — a legacy Windows vulnerability.
Null sessions were common in Windows NT/2000. Modern Windows disables anonymous SMB by default. SMB signing prevents MITM on SMB connections. Enum4linux can still exploit misconfigurations. Disable SMB v1 entirely.