Peppo_Ident

Ident

---

Nmap discovered a Ident service on the target port 113 The running service is FreeBSD identd

The Ident Protocol is is an Internet protocol that helps identify the user of a particular TCP connection. One popular daemon program for providing the ident service is identd. It’s designed to work as a server daemon, on a user’s computer, where it receives requests to a specified TCP port, generally 113. In the query, a client specifies a pair of TCP ports (a local and a remote port), encoded as ASCII decimals and separated by a comma (,). The server then sends a response that identifies the username of the user who runs the program that uses the specified pair of TCP ports, or specifies an error.

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/peppo]
└─$ telnet $IP 113
Trying 192.168.154.60...
Connected to 192.168.154.60.
Escape character is '^]'.
 
0 , 0 : ERROR : INVALID-PORT
 
0 , 0 : ERROR : INVALID-PORT
 
0 , 0 : ERROR : INVALID-PORT
 
0 , 0 : ERROR : INVALID-PORT

It’s mapped to no service

ident-user-enum

---

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/peppo]
└─$ ident-user-enum $IP 113
ident-user-enum v1.0 ( http://pentestmonkey.net/tools/ident-user-enum )
 
192.168.154.60:113	nobody

The Ident service itself is running as nobody

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/peppo]
└─$ ident-user-enum $IP 22  
ident-user-enum v1.0 ( http://pentestmonkey.net/tools/ident-user-enum )
 
192.168.154.60:22	root

SSH is running as root

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/peppo]
└─$ ident-user-enum $IP 5432 
ident-user-enum v1.0 ( http://pentestmonkey.net/tools/ident-user-enum )
 
192.168.154.60:5432	<unknown>
 
┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/peppo]
└─$ ident-user-enum $IP 8080
ident-user-enum v1.0 ( http://pentestmonkey.net/tools/ident-user-enum )
 
192.168.154.60:8080	<unknown>

Unknown for PostgeSQL and Redmine instance on the port 8080

┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/peppo]
└─$ ident-user-enum $IP 10000
ident-user-enum v1.0 ( http://pentestmonkey.net/tools/ident-user-enum )
 
192.168.154.60:10000	eleanor

The web server on the target port 10000 is running as the eleanor user