Six Years of Service
Posts: 163
Threads: 70
Finding usernames of a web server. 10-04-2020, 08:21 PM
#1
Hello,
If port 445 of a Windows Server is open, then is it possible to find the usernames of that server? Is "SMB Enumeration" the name of this technique?
Thank you.
(This post was last modified: 10-04-2020, 08:21 PM by Hack3rcon.)
![[+]](https://sinister.li/images/modern/collapse_collapsed.png)
•
Ten Years of Service
Posts: 7,862
Threads: 3,965
RE: Finding usernames of a web server. 10-05-2020, 12:53 AM
#2
No, there is a service (SMB) that works on that port on windows. EthernalBlue and Wannacry takes advantage of this service, you don't need passwords. If the system isn't patched then it can allow remote code execution. If you need to block the port or to check if you are vulnerable just download my kit available here in the forum.
(This post was last modified: 10-05-2020, 12:54 AM by hacxx.)
•
Six Years of Service
Posts: 163
Threads: 70
RE: Finding usernames of a web server. 10-05-2020, 07:26 AM
#3
Thank you.
How can I Enumeration the Windows usernames?
•
Five Years of Service
Posts: 5
Threads: 1
RE: Finding usernames of a web server. 11-01-2020, 08:40 AM
#4
Depends on OS, version and patches.
If it is indeed SMB protocol, you can try the NMAP script smb-enum-users
•
![[Image: APT-footer.png]](https://i.ibb.co/4sdxKgC/APT-footer.png)
