mirror of
https://github.com/carlospolop/hacktricks
synced 2024-11-28 23:51:29 +00:00
128 lines
6.5 KiB
Markdown
128 lines
6.5 KiB
Markdown
# 113 - Pentesting Ident
|
|
|
|
{% hint style="success" %}
|
|
Leer & oefen AWS Hacking:<img src="/.gitbook/assets/arte.png" alt="" data-size="line">[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="/.gitbook/assets/arte.png" alt="" data-size="line">\
|
|
Leer & oefen GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-size="line">[**HackTricks Training GCP Red Team Expert (GRTE)**<img src="/.gitbook/assets/grte.png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
|
|
|
|
<details>
|
|
|
|
<summary>Ondersteun HackTricks</summary>
|
|
|
|
* Kyk na die [**subskripsie planne**](https://github.com/sponsors/carlospolop)!
|
|
* **Sluit aan by die** 💬 [**Discord groep**](https://discord.gg/hRep4RUj7f) of die [**telegram groep**](https://t.me/peass) of **volg** ons op **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks\_live)**.**
|
|
* **Deel hacking truuks deur PRs in te dien na die** [**HackTricks**](https://github.com/carlospolop/hacktricks) en [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
|
|
|
|
</details>
|
|
{% endhint %}
|
|
|
|
<figure><img src="../.gitbook/assets/image (48).png" alt=""><figcaption></figcaption></figure>
|
|
|
|
Gebruik [**Trickest**](https://trickest.com/?utm_source=hacktricks&utm_medium=text&utm_campaign=ppc&utm_content=113-pentesting-ident) om maklik te bou en **werkvloei** te **automate** wat deur die wêreld se **mees gevorderde** gemeenskapstools aangedryf word.\
|
|
Kry Toegang Vandag:
|
|
|
|
{% embed url="https://trickest.com/?utm_source=hacktricks&utm_medium=banner&utm_campaign=ppc&utm_content=113-pentesting-ident" %}
|
|
|
|
## Basiese Inligting
|
|
|
|
Die **Ident Protokol** word oor die **Internet** gebruik om 'n **TCP-verbinding** met 'n spesifieke gebruiker te assosieer. Oorspronklik ontwerp om te help met **netwerkbestuur** en **veiligheid**, werk dit deur 'n bediener toe te laat om 'n kliënt op poort 113 te vra om inligting oor die gebruiker van 'n bepaalde TCP-verbinding aan te vra.
|
|
|
|
Tog, as gevolg van moderne privaatheidskwessies en die potensiaal vir misbruik, het die gebruik daarvan afgeneem aangesien dit onbedoeld gebruikersinligting aan ongemagtigde partye kan openbaar. Verbeterde veiligheidsmaatreëls, soos versleutelde verbintenisse en streng toegangbeheer, word aanbeveel om hierdie risiko's te verminder.
|
|
|
|
**Standaard poort:** 113
|
|
```
|
|
PORT STATE SERVICE
|
|
113/tcp open ident
|
|
```
|
|
## **Enumerasie**
|
|
|
|
### **Handmatig - Kry gebruiker/Identifiseer die diens**
|
|
|
|
As 'n masjien die diens ident en samba (445) draai en jy is verbind met samba deur die poort 43218. Jy kan kry watter gebruiker die samba diens draai deur:
|
|
|
|
.png>)
|
|
|
|
As jy net enter druk wanneer jy met die diens verbind:
|
|
|
|
.png>)
|
|
|
|
Ander foute:
|
|
|
|
.png>)
|
|
|
|
### Nmap
|
|
|
|
Standaard (\`-sC\`\`) sal nmap elke gebruiker van elke draaiende poort identifiseer:
|
|
```
|
|
PORT STATE SERVICE VERSION
|
|
22/tcp open ssh OpenSSH 4.3p2 Debian 9 (protocol 2.0)
|
|
|_auth-owners: root
|
|
| ssh-hostkey:
|
|
| 1024 88:23:98:0d:9d:8a:20:59:35:b8:14:12:14:d5:d0:44 (DSA)
|
|
|_ 2048 6b:5d:04:71:76:78:56:96:56:92:a8:02:30:73:ee:fa (RSA)
|
|
113/tcp open ident
|
|
|_auth-owners: identd
|
|
139/tcp open netbios-ssn Samba smbd 3.X - 4.X (workgroup: LOCAL)
|
|
|_auth-owners: root
|
|
445/tcp open netbios-ssn Samba smbd 3.0.24 (workgroup: LOCAL)
|
|
|_auth-owners: root
|
|
```
|
|
### Ident-user-enum
|
|
|
|
[**Ident-user-enum**](https://github.com/pentestmonkey/ident-user-enum) is 'n eenvoudige PERL-skrip om die ident-diens (113/TCP) te vra om die eienaar van die proses wat op elke TCP-poort van 'n teikenstelsel luister, te bepaal. Die lys van gebruikersname wat versamel is, kan gebruik word vir wagwoordraaisels op ander netwerkdienste. Dit kan geïnstalleer word met `apt install ident-user-enum`.
|
|
```
|
|
root@kali:/opt/local/recon/192.168.1.100# ident-user-enum 192.168.1.100 22 113 139 445
|
|
ident-user-enum v1.0 ( http://pentestmonkey.net/tools/ident-user-enum )
|
|
|
|
192.168.1.100:22 root
|
|
192.168.1.100:113 identd
|
|
192.168.1.100:139 root
|
|
192.168.1.100:445 root
|
|
```
|
|
### Shodan
|
|
|
|
* `oident`
|
|
|
|
## Lêers
|
|
|
|
identd.conf
|
|
|
|
<figure><img src="../.gitbook/assets/image (48).png" alt=""><figcaption></figcaption></figure>
|
|
|
|
Gebruik [**Trickest**](https://trickest.com/?utm_source=hacktricks&utm_medium=text&utm_campaign=ppc&utm_content=113-pentesting-ident) om maklik te bou en **outomatiese werksvloei** te skep wat aangedryf word deur die wêreld se **meest gevorderde** gemeenskapstoestelle.\
|
|
Kry Toegang Vandag:
|
|
|
|
{% embed url="https://trickest.com/?utm_source=hacktricks&utm_medium=banner&utm_campaign=ppc&utm_content=113-pentesting-ident" %}
|
|
|
|
## HackTricks Outomatiese Opdragte
|
|
```
|
|
Protocol_Name: Ident #Protocol Abbreviation if there is one.
|
|
Port_Number: 113 #Comma separated if there is more than one.
|
|
Protocol_Description: Identification Protocol #Protocol Abbreviation Spelled out
|
|
|
|
Entry_1:
|
|
Name: Notes
|
|
Description: Notes for Ident
|
|
Note: |
|
|
The Ident Protocol is used over the Internet to associate a TCP connection with a specific user. Originally designed to aid in network management and security, it operates by allowing a server to query a client on port 113 to request information about the user of a particular TCP connection.
|
|
|
|
https://book.hacktricks.xyz/pentesting/113-pentesting-ident
|
|
|
|
Entry_2:
|
|
Name: Enum Users
|
|
Description: Enumerate Users
|
|
Note: apt install ident-user-enum ident-user-enum {IP} 22 23 139 445 (try all open ports)
|
|
```
|
|
{% hint style="success" %}
|
|
Leer & oefen AWS Hacking:<img src="/.gitbook/assets/arte.png" alt="" data-size="line">[**HackTricks Opleiding AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)<img src="/.gitbook/assets/arte.png" alt="" data-size="line">\
|
|
Leer & oefen GCP Hacking: <img src="/.gitbook/assets/grte.png" alt="" data-size="line">[**HackTricks Opleiding GCP Red Team Expert (GRTE)**<img src="/.gitbook/assets/grte.png" alt="" data-size="line">](https://training.hacktricks.xyz/courses/grte)
|
|
|
|
<details>
|
|
|
|
<summary>Ondersteun HackTricks</summary>
|
|
|
|
* Kyk na die [**subskripsie planne**](https://github.com/sponsors/carlospolop)!
|
|
* **Sluit aan by die** 💬 [**Discord groep**](https://discord.gg/hRep4RUj7f) of die [**telegram groep**](https://t.me/peass) of **volg** ons op **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks\_live)**.**
|
|
* **Deel hacking truuks deur PRs in te dien na die** [**HackTricks**](https://github.com/carlospolop/hacktricks) en [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
|
|
|
|
</details>
|
|
{% endhint %}
|