Anvilpoint CyberOps - Hacker for Hire ◆ ProxiesFood: Unlimited Residential Proxy ◆ Cheap KYC Verifications & Openups ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Tech Computing Linux › Determine logged on user on Windows computer from Linux

New Reply 

Determine logged on user on Windows computer from Linux
hack3rcon
hack3rcon Offline
[closed@HF:]
Posts:
889
Threads:
344
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Nov 23, 2016 09:12 AM
Hello.
Can I use "net rpc" command for determine who is logged on Windows? I know Windows has a nice tools with the name "Psloggedon.exe" but can Linux has some kind of tools like it?
I found "https://nmap.org/nsedoc/scripts/smb-enum-users.html" but not worked :(

Thank you.
kiasa
kiasa Offline
[user@HF:]
*
Registered
Posts:
244
Threads:
2
Credibility:
000
Popularity:
1
βytes:
β 0
Game XP:
0
Nov 23, 2016 06:58 PM (This post was last modified: Nov 23, 2016 07:00 PM by kiasa.)
There are many techniques to fingerprinting, but none that I am aware of using...

So you'll probably be better off searching google for OS fingerprinting techniques.
hack3rcon
hack3rcon Offline
[closed@HF:]
Posts:
889
Threads:
344
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Nov 24, 2016 02:24 AM
(Nov 23, 2016 06:58 PM)kiasa Wrote:  There are many techniques to fingerprinting, but none that I am aware of using...

So you'll probably be better off searching google for OS fingerprinting techniques.

OS fingerprinting is not my goal, I like to find who is login via linux.
SuckySucky
SuckySucky Away
[user@HF:]
*
Registered
Posts:
427
Threads:
2
Credibility:
000
Popularity:
10
βytes:
β 2
Game XP:
27
Nov 25, 2016 08:19 AM
Yes it is possible using SAMBA.
https://www.samba.org/samba/docs/man/Sam...#id2599400
hack3rcon
hack3rcon Offline
[closed@HF:]
Posts:
889
Threads:
344
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Nov 25, 2016 11:53 PM
(Nov 25, 2016 08:19 AM)SuckySucky Wrote:  Yes it is possible using SAMBA.
https://www.samba.org/samba/docs/man/Sam...#id2599400

Can you tell me the correct syntax if IP is 192.168.72.1 ?
Fladrif
Fladrif Offline
[user@HF:]
*
Registered
Posts:
132
Threads:
4
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
602
Nov 28, 2016 04:19 AM
The following MSF module is your friend:

https://www.rapid7.com/db/modules/auxili...ers_domain

Also, if you have a meterpreter: https://www.rapid7.com/db/modules/post/w...d_on_users

And if you have SMB creds then: rpcclient ?U <username> 192.168.72.1
Then use enumdomusers / lookupnames / queryuser commands at the rpcclient command line.
datguy.dev
datguy.dev Offline
[closed@HF:]
Posts:
4,608
Threads:
365
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
1
Nov 29, 2016 04:36 PM (This post was last modified: Nov 29, 2016 04:38 PM by datguy.dev.)
They have Powershell for Linux now. (https://github.com/PowerShell/PowerShell) I haven't tried it yet, so I'm not sure how limited it is. But you might be able to use Psloggedon.exe that way. Outside of Samba, you may be able to do some packet sniffing or what have you of the HomeGroup protocol. If you send the right request, it may shoot back a response to whether.... ( https://winprotocoldoc.blob.core.windows...s/MS-HGRP/[MS-HGRP].pdf ) I don't know, just a brain fart.
hack3rcon
hack3rcon Offline
[closed@HF:]
Posts:
889
Threads:
344
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Nov 30, 2016 10:24 AM
(Nov 29, 2016 04:36 PM)datguy.dev Wrote:  They have Powershell for Linux now. (https://github.com/PowerShell/PowerShell) I haven't tried it yet, so I'm not sure how limited it is. But you might be able to use Psloggedon.exe that way. Outside of Samba, you may be able to do some packet sniffing or what have you of the HomeGroup protocol. If you send the right request, it may shoot back a response to whether.... ( https://winprotocoldoc.blob.core.windows...s/MS-HGRP/[MS-HGRP].pdf ) I don't know, just a brain fart.
Ah, PowerShell has "PsTools"?
datguy.dev
datguy.dev Offline
[closed@HF:]
Posts:
4,608
Threads:
365
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
1
Nov 30, 2016 04:46 PM
(Nov 30, 2016 10:24 AM)hack3rcon Wrote:  Ah, PowerShell has "PsTools"?

The only PSTools I know of are Windows binaries. I don't know what kind of luck you'd have running them under Wine with the Linux PS package installed. That might be worth trying.


But my main point was psloggedon.exe essentially just uses the "net session" command. You could write your own PowerShell script. -> https://blogs.technet.microsoft.com/heys...-sessions/
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Kali] by trippymane812Aug 20, 2018 12:03 AM 3 148 Aug 20, 2018 12:03 AM
Last Post: CyberStrike
by PGTipsJul 13, 2017 08:28 PM 3 193 Jul 13, 2017 08:28 PM
Last Post: Cannot Compute
by mindswordFeb 14, 2014 05:47 PM 10 388 Feb 14, 2014 05:47 PM
Last Post: Zerxes