RE: locate windows workstation if you know the username



Hello,

if they're using WINS, send a NetBIOS name
request for the username, netbios service 03
(i.e. messenger service) to the WINS server.
It will respond with the IP of the host registered
to the user's workstation.

--------------------------------------------
Mike Sues, GCIH
CEO & Ethical Hack Specialist
Rigel Kent Security & Advisory Services Inc
http://www.rigelksecurity.com
voice:613.233.HACK
fax :613.233.1788
toll
free :1.877.777.H8CK
--------------------------------------------


-----Original Message-----
From: offset [mailto:offset@xxxxxxxxxxxxxxxx]
Sent: Wednesday, August 30, 2006 1:34 AM
To: pen-test@xxxxxxxxxxxxxxxxx
Subject: locate windows workstation if you know the username


Greetings fellow pen-testers,

Looking for ideas on tracking down a windows workstation if you know the
username.

I know that if I run net send username "" I can tell that the user
is online without the message box popping up on their machine (usually), but
I'd like to know which workstation a particular user is at for a targeted
arp spoofing attack against a client.

-off

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------



Relevant Pages

  • RE: Re[2]: locate windows workstation if you know the username
    ... locate windows workstation if you know the username ... Cenzic Hailstorm finds vulnerabilities fast. ... Click the link to buy it, try it or download Hailstorm for FREE. ...
    (Pen-Test)
  • Re[2]: locate windows workstation if you know the username
    ... request for the username, netbios service 03 ... locate windows workstation if you know the username ... Looking for ideas on tracking down a windows workstation if you know the ... Cenzic Hailstorm finds vulnerabilities fast. ...
    (Pen-Test)
  • Re: Re[2]: locate windows workstation if you know the username
    ... There is a windows version that is still around do a google for nbtscan. ... locate windows workstation if you know the username ... Cenzic Hailstorm finds vulnerabilities fast. ...
    (Pen-Test)
  • Re[2]: locate windows workstation if you know the username
    ... name, username, domain/workgroup and MAC address. ... Looking for ideas on tracking down a windows workstation if you know the ... Cenzic Hailstorm finds vulnerabilities fast. ... Click the link to buy it, try it or download Hailstorm for FREE. ...
    (Pen-Test)
  • Re: brute-force with tsgrinder
    ... local account, then try specifying the local box name as the "domain" rather ... I have the username and typed the current ... Cenzic Hailstorm finds vulnerabilities fast. ... Click the link to buy it, try it or download Hailstorm for FREE. ...
    (Pen-Test)