HackTricks
Search…
Pentesting
Powered By GitBook
113 - Pentesting Ident

Basic Information

Is an Internet protocol that helps identify the user of a particular TCP connection.
Default port: 113
1
PORT STATE SERVICE
2
113/tcp open ident
Copied!

Enumeration

Manual - Get user/Identify the service

If a machine is running the service ident and samba (445) and you are connected to samba using the port 43218. You can get which user is running the samba service by doing:
If you just press enter when you conenct to the service:
Other errors:

Nmap

By default (-sC) nmap will identify every user of every running port:
1
PORT STATE SERVICE VERSION
2
22/tcp open ssh OpenSSH 4.3p2 Debian 9 (protocol 2.0)
3
|_auth-owners: root
4
| ssh-hostkey:
5
| 1024 88:23:98:0d:9d:8a:20:59:35:b8:14:12:14:d5:d0:44 (DSA)
6
|_ 2048 6b:5d:04:71:76:78:56:96:56:92:a8:02:30:73:ee:fa (RSA)
7
113/tcp open ident
8
|_auth-owners: identd
9
139/tcp open netbios-ssn Samba smbd 3.X - 4.X (workgroup: LOCAL)
10
|_auth-owners: root
11
445/tcp open netbios-ssn Samba smbd 3.0.24 (workgroup: LOCAL)
12
|_auth-owners: root
Copied!

Ident-user-enum

Ident-user-enum is a simple PERL script to query the ident service (113/TCP) in order to determine the owner of the process listening on each TCP port of a target system. The list of usernames gathered can be used for password guessing attacks on other network services. It can be installed with apt install ident-user-enum.
1
[email protected]:/opt/local/recon/192.168.1.100# ident-user-enum 192.168.1.100 22 113 139 445
2
ident-user-enum v1.0 ( http://pentestmonkey.net/tools/ident-user-enum )
3
4
192.168.1.100:22 root
5
192.168.1.100:113 identd
6
192.168.1.100:139 root
7
192.168.1.100:445 root
Copied!

Shodan

    oident

Files

identd.conf

HackTricks Automatic Commands

1
Protocol_Name: Ident #Protocol Abbreviation if there is one.
2
Port_Number: 113 #Comma separated if there is more than one.
3
Protocol_Description: Identification Protocol #Protocol Abbreviation Spelled out
4
5
Entry_1:
6
Name: Notes
7
Description: Notes for Ident
8
Note: |
9
Is an Internet protocol that helps identify the user of a particular TCP connection.
10
11
https://book.hacktricks.xyz/pentesting/113-pentesting-ident
12
13
Entry_2:
14
Name: Enum Users
15
Description: Enumerate Users
16
Note: apt install ident-user-enum ident-user-enum {IP} 22 23 139 445 (try all open ports)
Copied!
Last modified 2mo ago