CTF/HTB/escape/results/escape.htb/scans/tcp139/enum4linux.txt

Starting enum4linux v0.9.1 ( http://labs.portcullis.co.uk/application/enum4linux/ ) on Tue Feb 28 12:05:45 2023
 
=========================================( Target Information )=========================================
 
Target ........... escape.htb
RID Range ........ 500-550,1000-1050
Username ......... ''
Password ......... ''
Known Usernames .. administrator, guest, krbtgt, domain admins, root, bin, none
 
 
=============================( Enumerating Workgroup/Domain on escape.htb )=============================
 
 
[E] Can't find workgroup/domain
 
 
 
=================================( Nbtstat Information for escape.htb )=================================
 
Looking up status of 10.129.184.130
No reply from 10.129.184.130
 
====================================( Session Check on escape.htb )====================================
 
 
[+] Server escape.htb allows sessions using username '', password ''
 
 
============================( Getting information via LDAP for escape.htb )============================
 
 
[+] escape.htb appears to be a child DC
 
 
=================================( Getting domain SID for escape.htb )=================================
 
Domain Name: sequel
Domain Sid: S-1-5-21-4078382237-1492182817-2568127209
 
[+] Host is part of a domain (not a workgroup)
 
 
====================================( OS information on escape.htb )====================================
 
 
[E] Can't get OS info with smbclient
 
 
[+] Got OS info for escape.htb from srvinfo:
do_cmd: Could not initialise srvsvc. Error was NT_STATUS_ACCESS_DENIED
 
 
========================================( Users on escape.htb )========================================
 
 
[E] Couldn't find users using querydispinfo: NT_STATUS_ACCESS_DENIED
 
 
 
[E] Couldn't find users using enumdomusers: NT_STATUS_ACCESS_DENIED
 
 
=================================( Machine Enumeration on escape.htb )=================================
 
 
[E] Not implemented in this version of enum4linux.
 
 
==================================( Share Enumeration on escape.htb )==================================
 
do_connect: Connection to escape.htb failed (Error NT_STATUS_RESOURCE_NAME_NOT_FOUND)
 
Sharename Type Comment
--------- ---- -------
Reconnecting with SMB1 for workgroup listing.
Unable to connect with SMB1 -- no workgroup available
 
[+] Attempting to map shares on escape.htb
 
 
=============================( Password Policy Information for escape.htb )=============================
 
 
[E] Unexpected error from polenum:
 
 
 
[+] Attaching to escape.htb using a NULL share
 
[+] Trying protocol 139/SMB...
 
[!] Protocol failed: Cannot request session (Called Name:ESCAPE.HTB)
 
[+] Trying protocol 445/SMB...
 
[!] Protocol failed: SAMR SessionError: code: 0xc0000022 - STATUS_ACCESS_DENIED - {Access Denied} A process has requested access to an object but has not been granted those access rights.
 
[E] Failed to get password policy with rpcclient
 
 
 
========================================( Groups on escape.htb )========================================
 
 
[+] Getting builtin groups:
 
 
[+] Getting builtin group memberships:
 
 
[+] Getting local groups:
 
 
[+] Getting local group memberships:
 
 
[+] Getting domain groups:
 
 
[+] Getting domain group memberships:
 
 
===================( Users on escape.htb via RID cycling (RIDS: 500-550,1000-1050) )===================
 
 
[E] Couldn't get SID: NT_STATUS_ACCESS_DENIED. RID cycling not possible.
 
 
================================( Getting printer info for escape.htb )================================
 
do_cmd: Could not initialise spoolss. Error was NT_STATUS_ACCESS_DENIED
 
 
enum4linux complete on Tue Feb 28 12:06:39 2023