NetBios… still out there giving gifts. We had a pen test a couple years ago and the hackers were easily able to get NetBios to use some old legacy feature to request user hashes. From there just load them into a GPU heavy cracker and 50% of our company user passwords in a few hours.

The IT company at the time had no idea they shouldn’t enable netbios unless it was actually required for something.