HackTricks
Search…
Linux/Unix
Windows
Mobile Apps Pentesting
Pentesting
Pentesting Web
Forensics
A.I. Exploiting
Blockchain
Courses and Certifications Reviews
Physical attacks
Reversing
Cryptography
113 - Pentesting Ident
Basic Information
Default port: 113
1
PORT STATE SERVICE
2
113/tcp open ident
Copied!
Enumeration
Manual - Get user/Identify the service
If a machine is running the service ident and samba (445) and you are connected to samba using the port 43218. You can get which user is running the samba service by doing:
If you just press enter when you conenct to the service:
Other errors:
Nmap
By default (-sC) nmap will identify every user of every running port:
1
PORT STATE SERVICE VERSION
2
22/tcp open ssh OpenSSH 4.3p2 Debian 9 (protocol 2.0)
3
|_auth-owners: root
4
| ssh-hostkey:
5
| 1024 88:23:98:0d:9d:8a:20:59:35:b8:14:12:14:d5:d0:44 (DSA)
6
|_ 2048 6b:5d:04:71:76:78:56:96:56:92:a8:02:30:73:ee:fa (RSA)
7
113/tcp open ident
8
|_auth-owners: identd
9
139/tcp open netbios-ssn Samba smbd 3.X - 4.X (workgroup: LOCAL)
10
|_auth-owners: root
11
445/tcp open netbios-ssn Samba smbd 3.0.24 (workgroup: LOCAL)
12
|_auth-owners: root
Copied!
Ident-user-enum
Ident-user-enum is a simple PERL script to query the ident service (113/TCP) in order to determine the owner of the process listening on each TCP port of a target system. The list of usernames gathered can be used for password guessing attacks on other network services. It can be installed with
apt install ident-user-enum.1
[email protected]:/opt/local/recon/192.168.1.100# ident-user-enum 192.168.1.100 22 113 139 445
2
ident-user-enum v1.0 ( http://pentestmonkey.net/tools/ident-user-enum )
3
​
4
192.168.1.100:22 root
5
192.168.1.100:113 identd
6
192.168.1.100:139 root
7
192.168.1.100:445 root
Copied!
Shodan
oident
Files
identd.conf
HackTricks Automatic Commands
1
Protocol_Name: Ident #Protocol Abbreviation if there is one.
2
Port_Number: 113 #Comma separated if there is more than one.
3
Protocol_Description: Identification Protocol #Protocol Abbreviation Spelled out
4
​
5
Entry_1:
6
Name: Notes
7
Description: Notes for Ident
8
Note: |
9
Is an Internet protocol that helps identify the user of a particular TCP connection.
10
​
11
https://book.hacktricks.xyz/pentesting/113-pentesting-ident
12
​
13
Entry_2:
14
Name: Enum Users
15
Description: Enumerate Users
16
Note: apt install ident-user-enum ident-user-enum {IP} 22 23 139 445 (try all open ports)
Copied!
Last modified 5mo ago