initial commit

CTF/BasicPentesting/enum4linux_scan1.txt

@@ -0,0 +1,191 @@
+Starting enum4linux v0.9.1 ( http://labs.portcullis.co.uk/application/enum4linux/ ) on Wed Oct 15 20:57:13 2025
+
+ =========================================( Target Information )=========================================
+
+Target ........... 10.10.208.221
+RID Range ........ 500-550,1000-1050
+Username ......... ''
+Password ......... ''
+Known Usernames .. administrator, guest, krbtgt, domain admins, root, bin, none
+
+
+ ===========================( Enumerating Workgroup/Domain on 10.10.208.221 )===========================
+
+
+[+] Got domain/workgroup name: WORKGROUP
+
+
+ ===============================( Nbtstat Information for 10.10.208.221 )===============================
+
+Looking up status of 10.10.208.221
+	BASIC2          <00> -         B <ACTIVE>  Workstation Service
+	BASIC2          <03> -         B <ACTIVE>  Messenger Service
+	BASIC2          <20> -         B <ACTIVE>  File Server Service
+	..__MSBROWSE__. <01> - <GROUP> B <ACTIVE>  Master Browser
+	WORKGROUP       <00> - <GROUP> B <ACTIVE>  Domain/Workgroup Name
+	WORKGROUP       <1d> -         B <ACTIVE>  Master Browser
+	WORKGROUP       <1e> - <GROUP> B <ACTIVE>  Browser Service Elections
+
+	MAC Address = 00-00-00-00-00-00
+
+ ===================================( Session Check on 10.10.208.221 )===================================
+
+
+[+] Server 10.10.208.221 allows sessions using username '', password ''
+
+
+ ================================( Getting domain SID for 10.10.208.221 )================================
+
+Domain Name: WORKGROUP
+Domain Sid: (NULL SID)
+
+[+] Can't determine if host is part of domain or part of a workgroup
+
+
+ ==================================( OS information on 10.10.208.221 )==================================
+
+
+[E] Can't get OS info with smbclient
+
+
+[+] Got OS info for 10.10.208.221 from srvinfo: 
+	BASIC2         Wk Sv PrQ Unx NT SNT Samba Server 4.15.13-Ubuntu
+	platform_id     :	500
+	os version      :	6.1
+	server type     :	0x809a03
+
+
+ =======================================( Users on 10.10.208.221 )=======================================
+
+
+
+ =================================( Share Enumeration on 10.10.208.221 )=================================
+
+smbXcli_negprot_smb1_done: No compatible protocol selected by server.
+
+	Sharename       Type      Comment
+	---------       ----      -------
+	Anonymous       Disk      
+	IPC$            IPC       IPC Service (Samba Server 4.15.13-Ubuntu)
+Reconnecting with SMB1 for workgroup listing.
+Protocol negotiation to server 10.10.208.221 (for a protocol between LANMAN1 and NT1) failed: NT_STATUS_INVALID_NETWORK_RESPONSE
+Unable to connect with SMB1 -- no workgroup available
+
+[+] Attempting to map shares on 10.10.208.221
+
+//10.10.208.221/Anonymous	Mapping: OK Listing: OK Writing: N/A
+
+[E] Can't understand response:
+
+NT_STATUS_OBJECT_NAME_NOT_FOUND listing \*
+//10.10.208.221/IPC$	Mapping: N/A Listing: N/A Writing: N/A
+
+ ===========================( Password Policy Information for 10.10.208.221 )===========================
+
+
+
+[+] Attaching to 10.10.208.221 using a NULL share
+
+[+] Trying protocol 139/SMB...
+
+[+] Found domain(s):
+
+	[+] BASIC2
+	[+] Builtin
+
+[+] Password Info for Domain: BASIC2
+
+	[+] Minimum password length: 5
+	[+] Password history length: None
+	[+] Maximum password age: 136 years 37 days 6 hours 21 minutes 
+	[+] Password Complexity Flags: 000000
+
+		[+] Domain Refuse Password Change: 0
+		[+] Domain Password Store Cleartext: 0
+		[+] Domain Password Lockout Admins: 0
+		[+] Domain Password No Clear Change: 0
+		[+] Domain Password No Anon Change: 0
+		[+] Domain Password Complex: 0
+
+	[+] Minimum password age: None
+	[+] Reset Account Lockout Counter: 30 minutes 
+	[+] Locked Account Duration: 30 minutes 
+	[+] Account Lockout Threshold: None
+	[+] Forced Log off Time: 136 years 37 days 6 hours 21 minutes 
+
+
+
+[+] Retieved partial password policy with rpcclient:
+
+
+Password Complexity: Disabled
+Minimum Password Length: 5
+
+
+ ======================================( Groups on 10.10.208.221 )======================================
+
+
+[+] Getting builtin groups:
+
+
+[+]  Getting builtin group memberships:
+
+
+[+]  Getting local groups:
+
+
+[+]  Getting local group memberships:
+
+
+[+]  Getting domain groups:
+
+
+[+]  Getting domain group memberships:
+
+
+ ==================( Users on 10.10.208.221 via RID cycling (RIDS: 500-550,1000-1050) )==================
+
+
+[I] Found new SID: 
+S-1-22-1
+
+[I] Found new SID: 
+S-1-5-32
+
+[I] Found new SID: 
+S-1-5-32
+
+[I] Found new SID: 
+S-1-5-32
+
+[I] Found new SID: 
+S-1-5-32
+
+[+] Enumerating users using SID S-1-5-21-2853212168-2008227510-3551253869 and logon username '', password ''
+
+S-1-5-21-2853212168-2008227510-3551253869-501 BASIC2\nobody (Local User)
+S-1-5-21-2853212168-2008227510-3551253869-513 BASIC2\None (Domain Group)
+
+[+] Enumerating users using SID S-1-5-32 and logon username '', password ''
+
+S-1-5-32-544 BUILTIN\Administrators (Local Group)
+S-1-5-32-545 BUILTIN\Users (Local Group)
+S-1-5-32-546 BUILTIN\Guests (Local Group)
+S-1-5-32-547 BUILTIN\Power Users (Local Group)
+S-1-5-32-548 BUILTIN\Account Operators (Local Group)
+S-1-5-32-549 BUILTIN\Server Operators (Local Group)
+S-1-5-32-550 BUILTIN\Print Operators (Local Group)
+
+[+] Enumerating users using SID S-1-22-1 and logon username '', password ''
+
+S-1-22-1-1000 Unix User\kay (Local User)
+S-1-22-1-1001 Unix User\jan (Local User)
+S-1-22-1-1002 Unix User\ubuntu (Local User)
+
+ ===============================( Getting printer info for 10.10.208.221 )===============================
+
+No printers returned.
+
+
+enum4linux complete on Wed Oct 15 21:03:45 2025
+