CTF/HTB/escape/results/escape.htb/scans/tcp139/enum4linux.txt

Starting enum4linux v0.9.1 ( http://labs.portcullis.co.uk/application/enum4linux/ ) on Tue Feb 28 12:05:45 2023

 =========================================( Target Information )=========================================

Target ........... escape.htb
RID Range ........ 500-550,1000-1050
Username ......... ''
Password ......... ''
Known Usernames .. administrator, guest, krbtgt, domain admins, root, bin, none


 =============================( Enumerating Workgroup/Domain on escape.htb )=============================


[E] Can't find workgroup/domain



 =================================( Nbtstat Information for escape.htb )=================================

Looking up status of 10.129.184.130
No reply from 10.129.184.130

 ====================================( Session Check on escape.htb )====================================


[+] Server escape.htb allows sessions using username '', password ''


 ============================( Getting information via LDAP for escape.htb )============================


[+] escape.htb appears to be a child DC


 =================================( Getting domain SID for escape.htb )=================================

Domain Name: sequel
Domain Sid: S-1-5-21-4078382237-1492182817-2568127209

[+] Host is part of a domain (not a workgroup)


 ====================================( OS information on escape.htb )====================================


[E] Can't get OS info with smbclient


[+] Got OS info for escape.htb from srvinfo:
do_cmd: Could not initialise srvsvc. Error was NT_STATUS_ACCESS_DENIED


 ========================================( Users on escape.htb )========================================


[E] Couldn't find users using querydispinfo: NT_STATUS_ACCESS_DENIED



[E] Couldn't find users using enumdomusers: NT_STATUS_ACCESS_DENIED


 =================================( Machine Enumeration on escape.htb )=================================


[E] Not implemented in this version of enum4linux.


 ==================================( Share Enumeration on escape.htb )==================================

do_connect: Connection to escape.htb failed (Error NT_STATUS_RESOURCE_NAME_NOT_FOUND)

	Sharename       Type      Comment
	---------       ----      -------
Reconnecting with SMB1 for workgroup listing.
Unable to connect with SMB1 -- no workgroup available

[+] Attempting to map shares on escape.htb


 =============================( Password Policy Information for escape.htb )=============================


[E] Unexpected error from polenum:



[+] Attaching to escape.htb using a NULL share

[+] Trying protocol 139/SMB...

	[!] Protocol failed: Cannot request session (Called Name:ESCAPE.HTB)

[+] Trying protocol 445/SMB...

	[!] Protocol failed: SAMR SessionError: code: 0xc0000022 - STATUS_ACCESS_DENIED - {Access Denied} A process has requested access to an object but has not been granted those access rights.



[E] Failed to get password policy with rpcclient



 ========================================( Groups on escape.htb )========================================


[+] Getting builtin groups:


[+]  Getting builtin group memberships:


[+]  Getting local groups:


[+]  Getting local group memberships:


[+]  Getting domain groups:


[+]  Getting domain group memberships:


 ===================( Users on escape.htb via RID cycling (RIDS: 500-550,1000-1050) )===================


[E] Couldn't get SID: NT_STATUS_ACCESS_DENIED.  RID cycling not possible.


 ================================( Getting printer info for escape.htb )================================

do_cmd: Could not initialise spoolss. Error was NT_STATUS_ACCESS_DENIED


enum4linux complete on Tue Feb 28 12:06:39 2023