+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: Finding usernames of a web server. (/Thread-Finding-usernames-of-a-web-server)
Finding usernames of a web server. - Hack3rcon - 10-04-2020
Hello,
If port 445 of a Windows Server is open, then is it possible to find the usernames of that server? Is "SMB Enumeration" the name of this technique?
Thank you.
RE: Finding usernames of a web server. - hacxx - 10-05-2020
No, there is a service (SMB) that works on that port on windows. EthernalBlue and Wannacry takes advantage of this service, you don't need passwords. If the system isn't patched then it can allow remote code execution. If you need to block the port or to check if you are vulnerable just download my kit available here in the forum.
RE: Finding usernames of a web server. - Hack3rcon - 10-05-2020
Thank you.
How can I Enumeration the Windows usernames?
RE: Finding usernames of a web server. - APT9001 - 11-01-2020
Depends on OS, version and patches.
If it is indeed SMB protocol, you can try the NMAP script smb-enum-users