Starting enum4linux v0.9.1 ( http://labs.portcullis.co.uk/application/enum4linux/ ) on Fri May 8 16:33:16 2026  =========================================( Target Information )========================================= Target ........... 10.81.148.220 RID Range ........ 500-550,1000-1050 Username ......... '' Password ......... '' Known Usernames .. administrator, guest, krbtgt, domain admins, root, bin, none  ===========================( Enumerating Workgroup/Domain on 10.81.148.220 )===========================  [+] Got domain/workgroup name: WORKGROUP   ===============================( Nbtstat Information for 10.81.148.220 )=============================== Looking up status of 10.81.148.220 ..__MSBROWSE__. <01> - B Master Browser <00> - B <03> - B <20> - B WORKGROUP <00> - B Domain/Workgroup Name WORKGROUP <1d> - B Master Browser WORKGROUP <1e> - B Browser Service Elections MAC Address = 00-00-00-00-00-00  ===================================( Session Check on 10.81.148.220 )===================================  [+] Server 10.81.148.220 allows sessions using username '', password ''   ================================( Getting domain SID for 10.81.148.220 )================================ Domain Name: WORKGROUP Domain Sid: (NULL SID)  [+] Can't determine if host is part of domain or part of a workgroup   ==================================( OS information on 10.81.148.220 )==================================  [E] Can't get OS info with smbclient  [+] Got OS info for 10.81.148.220 from srvinfo:  IP-10-81-148-22Wk Sv PrQ Unx NT SNT ip-10-81-148-220 server (Samba, Ubuntu) platform_id : 500 os version : 6.1 server type : 0x809a03  =======================================( Users on 10.81.148.220 )=======================================   =================================( Share Enumeration on 10.81.148.220 )================================= smbXcli_negprot_smb1_done: No compatible protocol selected by server. Sharename Type Comment --------- ---- ------- print$ Disk Printer Drivers shares Disk VulnNet Business Shares IPC$ IPC IPC Service (ip-10-81-148-220 server (Samba, Ubuntu)) Reconnecting with SMB1 for workgroup listing. Protocol negotiation to server 10.81.148.220 (for a protocol between LANMAN1 and NT1) failed: NT_STATUS_INVALID_NETWORK_RESPONSE Unable to connect with SMB1 -- no workgroup available  [+] Attempting to map shares on 10.81.148.220 //10.81.148.220/print$ Mapping: DENIED Listing: N/A Writing: N/A //10.81.148.220/shares Mapping: OK Listing: OK Writing: N/A  [E] Can't understand response: NT_STATUS_OBJECT_NAME_NOT_FOUND listing \* //10.81.148.220/IPC$ Mapping: N/A Listing: N/A Writing: N/A  ===========================( Password Policy Information for 10.81.148.220 )===========================  [+] Attaching to 10.81.148.220 using a NULL share [+] Trying protocol 139/SMB... [+] Found domain(s): [+] IP-10-81-148-220 [+] Builtin [+] Password Info for Domain: IP-10-81-148-220 [+] Minimum password length: 5 [+] Password history length: None [+] Maximum password age: 136 years 37 days 6 hours 21 minutes [+] Password Complexity Flags: 000000 [+] Domain Refuse Password Change: 0 [+] Domain Password Store Cleartext: 0 [+] Domain Password Lockout Admins: 0 [+] Domain Password No Clear Change: 0 [+] Domain Password No Anon Change: 0 [+] Domain Password Complex: 0 [+] Minimum password age: None [+] Reset Account Lockout Counter: 30 minutes [+] Locked Account Duration: 30 minutes [+] Account Lockout Threshold: None [+] Forced Log off Time: 136 years 37 days 6 hours 21 minutes  [+] Retieved partial password policy with rpcclient: Password Complexity: Disabled Minimum Password Length: 5  ======================================( Groups on 10.81.148.220 )======================================  [+] Getting builtin groups:  [+]  Getting builtin group memberships:  [+]  Getting local groups:  [+]  Getting local group memberships:  [+]  Getting domain groups:  [+]  Getting domain group memberships:   ==================( Users on 10.81.148.220 via RID cycling (RIDS: 500-550,1000-1050) )==================  [I] Found new SID: S-1-22-1  [I] Found new SID: S-1-5-32  [I] Found new SID: S-1-5-32  [I] Found new SID: S-1-5-32  [I] Found new SID: S-1-5-32  [+] Enumerating users using SID S-1-5-32 and logon username '', password '' S-1-5-32-544 BUILTIN\Administrators (Local Group) S-1-5-32-545 BUILTIN\Users (Local Group) S-1-5-32-546 BUILTIN\Guests (Local Group) S-1-5-32-547 BUILTIN\Power Users (Local Group) S-1-5-32-548 BUILTIN\Account Operators (Local Group) S-1-5-32-549 BUILTIN\Server Operators (Local Group) S-1-5-32-550 BUILTIN\Print Operators (Local Group)  [+] Enumerating users using SID S-1-5-21-4177045482-676087334-2392555964 and logon username '', password '' S-1-5-21-4177045482-676087334-2392555964-501 IP-10-81-148-220\nobody (Local User) S-1-5-21-4177045482-676087334-2392555964-513 IP-10-81-148-220\None (Domain Group)  [+] Enumerating users using SID S-1-22-1 and logon username '', password '' S-1-22-1-1000 Unix User\sys-internal (Local User) S-1-22-1-1001 Unix User\ssm-user (Local User) S-1-22-1-1002 Unix User\ubuntu (Local User)  ===============================( Getting printer info for 10.81.148.220 )=============================== No printers returned. enum4linux complete on Fri May 8 16:37:34 2026