Starting enum4linux v0.9.1 ( http://labs.portcullis.co.uk/application/enum4linux/ ) on Wed Feb 8 13:31:17 2023  =========================================( Target Information )========================================= Target ........... flight.htb RID Range ........ 500-550,1000-1050 Username ......... '' Password ......... '' Known Usernames .. administrator, guest, krbtgt, domain admins, root, bin, none  =============================( Enumerating Workgroup/Domain on flight.htb )=============================  [E] Can't find workgroup/domain   =================================( Nbtstat Information for flight.htb )================================= Looking up status of 10.10.11.187 No reply from 10.10.11.187  ====================================( Session Check on flight.htb )====================================  [+] Server flight.htb allows sessions using username '', password ''   ============================( Getting information via LDAP for flight.htb )============================  [+] flight.htb appears to be a child DC   =================================( Getting domain SID for flight.htb )================================= Domain Name: flight Domain Sid: S-1-5-21-4078382237-1492182817-2568127209  [+] Host is part of a domain (not a workgroup)   ====================================( OS information on flight.htb )====================================  [E] Can't get OS info with smbclient  [+] Got OS info for flight.htb from srvinfo: do_cmd: Could not initialise srvsvc. Error was NT_STATUS_ACCESS_DENIED  ========================================( Users on flight.htb )========================================  [E] Couldn't find users using querydispinfo: NT_STATUS_ACCESS_DENIED   [E] Couldn't find users using enumdomusers: NT_STATUS_ACCESS_DENIED   =================================( Machine Enumeration on flight.htb )=================================  [E] Not implemented in this version of enum4linux.   ==================================( Share Enumeration on flight.htb )================================== do_connect: Connection to flight.htb failed (Error NT_STATUS_RESOURCE_NAME_NOT_FOUND) Sharename Type Comment --------- ---- ------- Reconnecting with SMB1 for workgroup listing. Unable to connect with SMB1 -- no workgroup available  [+] Attempting to map shares on flight.htb   =============================( Password Policy Information for flight.htb )=============================  [E] Unexpected error from polenum:  [+] Attaching to flight.htb using a NULL share [+] Trying protocol 139/SMB... [!] Protocol failed: Cannot request session (Called Name:FLIGHT.HTB) [+] Trying protocol 445/SMB... [!] Protocol failed: SAMR SessionError: code: 0xc0000022 - STATUS_ACCESS_DENIED - {Access Denied} A process has requested access to an object but has not been granted those access rights.  [E] Failed to get password policy with rpcclient   ========================================( Groups on flight.htb )========================================  [+] Getting builtin groups:  [+]  Getting builtin group memberships:  [+]  Getting local groups:  [+]  Getting local group memberships:  [+]  Getting domain groups:  [+]  Getting domain group memberships:   ===================( Users on flight.htb via RID cycling (RIDS: 500-550,1000-1050) )===================  [E] Couldn't get SID: NT_STATUS_ACCESS_DENIED. RID cycling not possible.   ================================( Getting printer info for flight.htb )================================ do_cmd: Could not initialise spoolss. Error was NT_STATUS_ACCESS_DENIED enum4linux complete on Wed Feb 8 13:31:44 2023