HackTricks
Searchโ€ฆ
๐Ÿ‘ฝ
Network Services Pentesting
113 - Pentesting Ident
Support HackTricks and get benefits!
โ€‹
A digital transformation tailored to your organization is unique. It also comes with its risks. Defend yourself against hackers. Get protection before it's too late. Talk to the professionals at Securityboat:
Let's connect - Securityboat
Securityboat - Frontline of Your Business

Basic Information

Is an Internet protocol that helps identify the user of a particular TCP connection.
Default port: 113
1
PORT STATE SERVICE
2
113/tcp open ident
Copied!

Enumeration

Manual - Get user/Identify the service

If a machine is running the service ident and samba (445) and you are connected to samba using the port 43218. You can get which user is running the samba service by doing:
If you just press enter when you conenct to the service:
Other errors:

Nmap

By default (-sC) nmap will identify every user of every running port:
1
PORT STATE SERVICE VERSION
2
22/tcp open ssh OpenSSH 4.3p2 Debian 9 (protocol 2.0)
3
|_auth-owners: root
4
| ssh-hostkey:
5
| 1024 88:23:98:0d:9d:8a:20:59:35:b8:14:12:14:d5:d0:44 (DSA)
6
|_ 2048 6b:5d:04:71:76:78:56:96:56:92:a8:02:30:73:ee:fa (RSA)
7
113/tcp open ident
8
|_auth-owners: identd
9
139/tcp open netbios-ssn Samba smbd 3.X - 4.X (workgroup: LOCAL)
10
|_auth-owners: root
11
445/tcp open netbios-ssn Samba smbd 3.0.24 (workgroup: LOCAL)
12
|_auth-owners: root
Copied!

Ident-user-enum

Ident-user-enum is a simple PERL script to query the ident service (113/TCP) in order to determine the owner of the process listening on each TCP port of a target system. The list of usernames gathered can be used for password guessing attacks on other network services. It can be installed with apt install ident-user-enum.
1
[email protected]:/opt/local/recon/192.168.1.100# ident-user-enum 192.168.1.100 22 113 139 445
2
ident-user-enum v1.0 ( http://pentestmonkey.net/tools/ident-user-enum )
3
โ€‹
4
192.168.1.100:22 root
5
192.168.1.100:113 identd
6
192.168.1.100:139 root
7
192.168.1.100:445 root
Copied!

Shodan

  • oident

Files

identd.conf

HackTricks Automatic Commands

1
Protocol_Name: Ident #Protocol Abbreviation if there is one.
2
Port_Number: 113 #Comma separated if there is more than one.
3
Protocol_Description: Identification Protocol #Protocol Abbreviation Spelled out
4
โ€‹
5
Entry_1:
6
Name: Notes
7
Description: Notes for Ident
8
Note: |
9
Is an Internet protocol that helps identify the user of a particular TCP connection.
10
โ€‹
11
https://book.hacktricks.xyz/pentesting/113-pentesting-ident
12
โ€‹
13
Entry_2:
14
Name: Enum Users
15
Description: Enumerate Users
16
Note: apt install ident-user-enum ident-user-enum {IP} 22 23 139 445 (try all open ports)
Copied!
โ€‹
A digital transformation tailored to your organization is unique. It also comes with its risks. Defend yourself against hackers. Get protection before it's too late. Talk to the professionals at Securityboat:
Let's connect - Securityboat
Securityboat - Frontline of Your Business
Support HackTricks and get benefits!