113 - Pentesting Ident

Support HackTricks and get benefits!
​

A digital transformation tailored to your organization is unique. It also comes with its risks. Defend yourself against hackers. Get protection before it's too late. Talk to the professionals at Securityboat:
Let's connect - Securityboat
Securityboat - Frontline of Your Business
Basic Information
Is an Internet protocol that helps identify the user of a particular TCP connection.
Default port: 113
1
PORT    STATE SERVICE
2
113/tcp open  ident
Copied!
Enumeration
Manual - Get user/Identify the service
If a machine is running the service ident and samba (445) and you are connected to samba using the port 43218. You can get which user is running the samba service by doing:
If you just press enter when you conenct to the service:
Other errors:
Nmap
By default (-sC) nmap will identify every user of every running port:
1
PORT    STATE SERVICE     VERSION
2
22/tcp  open  ssh         OpenSSH 4.3p2 Debian 9 (protocol 2.0)
3
|_auth-owners: root
4
| ssh-hostkey: 
5
|   1024 88:23:98:0d:9d:8a:20:59:35:b8:14:12:14:d5:d0:44 (DSA)
6
|_  2048 6b:5d:04:71:76:78:56:96:56:92:a8:02:30:73:ee:fa (RSA)
7
113/tcp open  ident
8
|_auth-owners: identd
9
139/tcp open  netbios-ssn Samba smbd 3.X - 4.X (workgroup: LOCAL)
10
|_auth-owners: root
11
445/tcp open  netbios-ssn Samba smbd 3.0.24 (workgroup: LOCAL)
12
|_auth-owners: root
Copied!
Ident-user-enum
Ident-user-enum is a simple PERL script to query the ident service (113/TCP) in order to determine the owner of the process listening on each TCP port of a target system. The list of usernames gathered can be used for password guessing attacks on other network services. It can be installed with apt install ident-user-enum.
1
[email protected]:/opt/local/recon/192.168.1.100# ident-user-enum 192.168.1.100 22 113 139 445
2
ident-user-enum v1.0 ( http://pentestmonkey.net/tools/ident-user-enum )
3
​
4
192.168.1.100:22  root
5
192.168.1.100:113 identd
6
192.168.1.100:139 root
7
192.168.1.100:445 root
Copied!
Shodan
oident
Files
identd.conf
HackTricks Automatic Commands
1
Protocol_Name: Ident    #Protocol Abbreviation if there is one.
2
Port_Number:  113     #Comma separated if there is more than one.
3
Protocol_Description: Identification Protocol         #Protocol Abbreviation Spelled out
4
​
5
Entry_1:
6
  Name: Notes
7
  Description: Notes for Ident
8
  Note: |
9
    Is an Internet protocol that helps identify the user of a particular TCP connection.
10
​
11
    https://book.hacktricks.xyz/pentesting/113-pentesting-ident
12
​
13
Entry_2:
14
  Name: Enum Users
15
  Description: Enumerate Users
16
  Note: apt install ident-user-enum    ident-user-enum {IP} 22 23 139 445 (try all open ports)
Copied!
​

A digital transformation tailored to your organization is unique. It also comes with its risks. Defend yourself against hackers. Get protection before it's too late. Talk to the professionals at Securityboat:
Let's connect - Securityboat
Securityboat - Frontline of Your Business
Support HackTricks and get benefits!

Network Services Pentesting - Previous

111/TCP/UDP - Pentesting Portmapper

Next - Network Services Pentesting

123/udp - Pentesting NTP

Last modified 10d ago

Copy link

Contents

Basic Information

Enumeration

Manual - Get user/Identify the service

HackTricks Automatic Commands