# SMB ``` PORT STATE SERVICE REASON VERSION 445/tcp open microsoft-ds? syn-ack ttl 127 |_smb-enum-services: ERROR: Script execution failed (use -d to debug) Host script results: | smb2-capabilities: | 2.0.2: | Distributed File System | 2.1: | Distributed File System | Leasing |_ Multi-credit operations | smb-protocols: | dialects: | 2.0.2 |_ 2.1 | smb2-time: | date: 2022-08-15T19:06:24 |_ start_date: 2022-08-15T18:59:57 | smb2-security-mode: | 2.1: |_ Message signing enabled and required | smb-mbenum: |_ ERROR: Failed to connect to browser service: Could not negotiate a connection:SMB: Failed to receive bytes: ERROR |_smb-vuln-ms10-061: Could not negotiate a connection:SMB: Failed to receive bytes: ERROR ``` ``` user:[CascGuest] rid:[0x1f5] user:[arksvc] rid:[0x452] user:[s.smith] rid:[0x453] user:[r.thompson] rid:[0x455] user:[util] rid:[0x457] user:[j.wakefield] rid:[0x45c] user:[s.hickson] rid:[0x461] user:[j.goodhand] rid:[0x462] user:[a.turnbull] rid:[0x464] user:[e.crowe] rid:[0x467] user:[b.hanson] rid:[0x468] user:[d.burman] rid:[0x469] user:[BackupSvc] rid:[0x46a] user:[j.allen] rid:[0x46e] user:[i.croft] rid:[0x46f] User Name : s.hickson Full Name : Stephanie Hickson Home Drive : Dir Drive : Profile Path: Logon Script: MapDataDrive.vbs Description : Workstations: Comment : Remote Dial : Logon Time : Wed, 31 Dec 1969 19:00:00 EST Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 13 Sep 30828 22:48:05 EDT Password last set Time : Sun, 12 Jan 2020 20:24:28 EST Password can change Time : Sun, 12 Jan 2020 20:24:28 EST Password must change Time: Wed, 13 Sep 30828 22:48:05 EDT unknown_2[0..31]... user_rid : 0x461 group_rid: 0x201 acb_info : 0x00000210 fields_present: 0x00ffffff logon_divs: 168 bad_password_count: 0x00000000 logon_count: 0x00000000 padding1[0..7]... logon_hrs[0..21]... Account Disabled : False Password does not expire : True Account locked out : False Password expired : False Interdomain trust account: False Workstation trust account: False Server trust account : False Trusted for delegation : False User Name : CascGuest Full Name : Home Drive : Dir Drive : Profile Path: Logon Script: Description : Built-in account for guest access to the computer/domain Workstations: Comment : Remote Dial : Logon Time : Wed, 31 Dec 1969 19:00:00 EST Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 13 Sep 30828 22:48:05 EDT Password last set Time : Wed, 31 Dec 1969 19:00:00 EST Password can change Time : Wed, 31 Dec 1969 19:00:00 EST Password must change Time: Wed, 13 Sep 30828 22:48:05 EDT unknown_2[0..31]... user_rid : 0x1f5 group_rid: 0x202 acb_info : 0x00000215 fields_present: 0x00ffffff logon_divs: 168 bad_password_count: 0x00000000 logon_count: 0x00000000 padding1[0..7]... logon_hrs[0..21]... Account Disabled : True Password does not expire : True Account locked out : False Password expired : False Interdomain trust account: False Workstation trust account: False Server trust account : False Trusted for delegation : False User Name : j.goodhand Full Name : John Goodhand Home Drive : Dir Drive : Profile Path: Logon Script: MapDataDrive.vbs Description : Workstations: Comment : Remote Dial : Logon Time : Wed, 31 Dec 1969 19:00:00 EST Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 13 Sep 30828 22:48:05 EDT Password last set Time : Sun, 12 Jan 2020 20:40:26 EST Password can change Time : Sun, 12 Jan 2020 20:40:26 EST Password must change Time: Wed, 13 Sep 30828 22:48:05 EDT unknown_2[0..31]... user_rid : 0x462 group_rid: 0x201 acb_info : 0x00000210 fields_present: 0x00ffffff logon_divs: 168 bad_password_count: 0x00000000 logon_count: 0x00000000 padding1[0..7]... logon_hrs[0..21]... Account Disabled : False Password does not expire : True Account locked out : False Password expired : False Interdomain trust account: False Workstation trust account: False Server trust account : False Trusted for delegation : False User Name : j.wakefield Full Name : James Wakefield Home Drive : Dir Drive : Profile Path: Logon Script: MapDataDrive.vbs Description : Workstations: Comment : Remote Dial : Logon Time : Wed, 31 Dec 1969 19:00:00 EST Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 13 Sep 30828 22:48:05 EDT Password last set Time : Thu, 09 Jan 2020 15:34:44 EST Password can change Time : Thu, 09 Jan 2020 15:34:44 EST Password must change Time: Wed, 13 Sep 30828 22:48:05 EDT unknown_2[0..31]... user_rid : 0x45c group_rid: 0x201 acb_info : 0x00000210 fields_present: 0x00ffffff logon_divs: 168 bad_password_count: 0x00000000 logon_count: 0x00000000 padding1[0..7]... logon_hrs[0..21]... Account Disabled : False Password does not expire : True Account locked out : False Password expired : False Interdomain trust account: False Workstation trust account: False Server trust account : False Trusted for delegation : False User Name : b.hanson Full Name : Ben Hanson Home Drive : Dir Drive : Profile Path: Logon Script: Description : Workstations: Comment : Remote Dial : Logon Time : Wed, 31 Dec 1969 19:00:00 EST Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 13 Sep 30828 22:48:05 EDT Password last set Time : Mon, 13 Jan 2020 11:35:39 EST Password can change Time : Mon, 13 Jan 2020 11:35:39 EST Password must change Time: Wed, 13 Sep 30828 22:48:05 EDT unknown_2[0..31]... user_rid : 0x468 group_rid: 0x201 acb_info : 0x00000211 fields_present: 0x00ffffff logon_divs: 168 bad_password_count: 0x00000000 logon_count: 0x00000000 padding1[0..7]... logon_hrs[0..21]... Account Disabled : True Password does not expire : True Account locked out : False Password expired : False Interdomain trust account: False Workstation trust account: False Server trust account : False Trusted for delegation : False User Name : j.allen Full Name : Joseph Allen Home Drive : Dir Drive : Profile Path: Logon Script: MapDataDrive.vbs Description : Workstations: Comment : Remote Dial : Logon Time : Wed, 31 Dec 1969 19:00:00 EST Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 13 Sep 30828 22:48:05 EDT Password last set Time : Mon, 13 Jan 2020 12:24:00 EST Password can change Time : Mon, 13 Jan 2020 12:24:00 EST Password must change Time: Wed, 13 Sep 30828 22:48:05 EDT unknown_2[0..31]... user_rid : 0x46e group_rid: 0x201 acb_info : 0x00000210 fields_present: 0x00ffffff logon_divs: 168 bad_password_count: 0x00000000 logon_count: 0x00000000 padding1[0..7]... logon_hrs[0..21]... Account Disabled : False Password does not expire : True Account locked out : False Password expired : False Interdomain trust account: False Workstation trust account: False Server trust account : False Trusted for delegation : False User Name : r.thompson Full Name : Ryan Thompson Home Drive : Dir Drive : Profile Path: Logon Script: Description : Workstations: Comment : Remote Dial : Logon Time : Tue, 28 Jan 2020 20:11:53 EST Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 13 Sep 30828 22:48:05 EDT Password last set Time : Thu, 09 Jan 2020 14:31:26 EST Password can change Time : Thu, 09 Jan 2020 14:31:26 EST Password must change Time: Wed, 13 Sep 30828 22:48:05 EDT unknown_2[0..31]... user_rid : 0x455 group_rid: 0x201 acb_info : 0x00000210 fields_present: 0x00ffffff logon_divs: 168 bad_password_count: 0x00000000 logon_count: 0x00000002 padding1[0..7]... logon_hrs[0..21]... Account Disabled : False Password does not expire : True Account locked out : False Password expired : False Interdomain trust account: False Workstation trust account: False Server trust account : False Trusted for delegation : False User Name : arksvc Full Name : ArkSvc Home Drive : Dir Drive : Profile Path: Logon Script: Description : Workstations: Comment : Remote Dial : Logon Time : Wed, 29 Jan 2020 16:05:41 EST Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 13 Sep 30828 22:48:05 EDT Password last set Time : Thu, 09 Jan 2020 11:18:20 EST Password can change Time : Thu, 09 Jan 2020 11:18:20 EST Password must change Time: Wed, 13 Sep 30828 22:48:05 EDT unknown_2[0..31]... user_rid : 0x452 group_rid: 0x201 acb_info : 0x00000210 fields_present: 0x00ffffff logon_divs: 168 bad_password_count: 0x00000000 logon_count: 0x0000000d padding1[0..7]... logon_hrs[0..21]... Account Disabled : False Password does not expire : True Account locked out : False Password expired : False Interdomain trust account: False Workstation trust account: False Server trust account : False Trusted for delegation : False User Name : util Full Name : Util Home Drive : Dir Drive : Profile Path: Logon Script: Description : Workstations: Comment : Remote Dial : Logon Time : Tue, 28 Jan 2020 13:09:47 EST Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 13 Sep 30828 22:48:05 EDT Password last set Time : Sun, 12 Jan 2020 21:07:11 EST Password can change Time : Sun, 12 Jan 2020 21:07:11 EST Password must change Time: Wed, 13 Sep 30828 22:48:05 EDT unknown_2[0..31]... user_rid : 0x457 group_rid: 0x201 acb_info : 0x00000210 fields_present: 0x00ffffff logon_divs: 168 bad_password_count: 0x00000000 logon_count: 0x00000001 padding1[0..7]... logon_hrs[0..21]... Account Disabled : False Password does not expire : True Account locked out : False Password expired : False Interdomain trust account: False Workstation trust account: False Server trust account : False Trusted for delegation : False User Name : d.burman Full Name : David Burman Home Drive : Dir Drive : Profile Path: Logon Script: MapDataDrive.vbs Description : Workstations: Comment : Remote Dial : Logon Time : Wed, 31 Dec 1969 19:00:00 EST Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 13 Sep 30828 22:48:05 EDT Password last set Time : Mon, 13 Jan 2020 11:36:13 EST Password can change Time : Mon, 13 Jan 2020 11:36:13 EST Password must change Time: Wed, 13 Sep 30828 22:48:05 EDT unknown_2[0..31]... user_rid : 0x469 group_rid: 0x201 acb_info : 0x00000210 fields_present: 0x00ffffff logon_divs: 168 bad_password_count: 0x00000000 logon_count: 0x00000000 padding1[0..7]... logon_hrs[0..21]... Account Disabled : False Password does not expire : True Account locked out : False Password expired : False Interdomain trust account: False Workstation trust account: False Server trust account : False Trusted for delegation : False User Name : a.turnbull Full Name : Adrian Turnbull Home Drive : Dir Drive : Profile Path: Logon Script: Description : Workstations: Comment : Remote Dial : Logon Time : Wed, 31 Dec 1969 19:00:00 EST Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 13 Sep 30828 22:48:05 EDT Password last set Time : Sun, 12 Jan 2020 20:43:13 EST Password can change Time : Sun, 12 Jan 2020 20:43:13 EST Password must change Time: Wed, 13 Sep 30828 22:48:05 EDT unknown_2[0..31]... user_rid : 0x464 group_rid: 0x201 acb_info : 0x00000214 fields_present: 0x00ffffff logon_divs: 168 bad_password_count: 0x00000000 logon_count: 0x00000000 padding1[0..7]... logon_hrs[0..21]... Account Disabled : False Password does not expire : True Account locked out : False Password expired : False Interdomain trust account: False Workstation trust account: False Server trust account : False Trusted for delegation : False User Name : i.croft Full Name : Ian Croft Home Drive : Dir Drive : Profile Path: Logon Script: MapDataDrive.vbs Description : Workstations: Comment : Remote Dial : Logon Time : Wed, 31 Dec 1969 19:00:00 EST Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 13 Sep 30828 22:48:05 EDT Password last set Time : Wed, 15 Jan 2020 16:46:22 EST Password can change Time : Wed, 15 Jan 2020 16:46:22 EST Password must change Time: Wed, 13 Sep 30828 22:48:05 EDT unknown_2[0..31]... user_rid : 0x46f group_rid: 0x201 acb_info : 0x00000211 fields_present: 0x00ffffff logon_divs: 168 bad_password_count: 0x00000000 logon_count: 0x00000000 padding1[0..7]... logon_hrs[0..21]... Account Disabled : True Password does not expire : True Account locked out : False Password expired : False Interdomain trust account: False Workstation trust account: False Server trust account : False Trusted for delegation : False User Name : BackupSvc Full Name : BackupSvc Home Drive : Dir Drive : Profile Path: Logon Script: Description : Workstations: Comment : Remote Dial : Logon Time : Wed, 31 Dec 1969 19:00:00 EST Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 13 Sep 30828 22:48:05 EDT Password last set Time : Mon, 13 Jan 2020 11:37:03 EST Password can change Time : Mon, 13 Jan 2020 11:37:03 EST Password must change Time: Wed, 13 Sep 30828 22:48:05 EDT unknown_2[0..31]... user_rid : 0x46a group_rid: 0x201 acb_info : 0x00000210 fields_present: 0x00ffffff logon_divs: 168 bad_password_count: 0x00000000 logon_count: 0x00000000 padding1[0..7]... logon_hrs[0..21]... Account Disabled : False Password does not expire : True Account locked out : False Password expired : False Interdomain trust account: False Workstation trust account: False Server trust account : False Trusted for delegation : False User Name : s.smith Full Name : Steve Smith Home Drive : Dir Drive : Profile Path: Logon Script: MapAuditDrive.vbs Description : Workstations: Comment : Remote Dial : Logon Time : Tue, 28 Jan 2020 18:26:39 EST Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 13 Sep 30828 22:48:05 EDT Password last set Time : Tue, 28 Jan 2020 14:58:05 EST Password can change Time : Tue, 28 Jan 2020 14:58:05 EST Password must change Time: Wed, 13 Sep 30828 22:48:05 EDT unknown_2[0..31]... user_rid : 0x453 group_rid: 0x201 acb_info : 0x00000210 fields_present: 0x00ffffff logon_divs: 168 bad_password_count: 0x00000000 logon_count: 0x00000010 padding1[0..7]... logon_hrs[0..21]... Account Disabled : False Password does not expire : True Account locked out : False Password expired : False Interdomain trust account: False Workstation trust account: False Server trust account : False Trusted for delegation : False User Name : e.crowe Full Name : Edward Crowe Home Drive : Dir Drive : Profile Path: Logon Script: MapDataDrive.vbs Description : Workstations: Comment : Remote Dial : Logon Time : Wed, 31 Dec 1969 19:00:00 EST Logoff Time : Wed, 31 Dec 1969 19:00:00 EST Kickoff Time : Wed, 13 Sep 30828 22:48:05 EDT Password last set Time : Sun, 12 Jan 2020 22:45:02 EST Password can change Time : Sun, 12 Jan 2020 22:45:02 EST Password must change Time: Wed, 13 Sep 30828 22:48:05 EDT unknown_2[0..31]... user_rid : 0x467 group_rid: 0x201 acb_info : 0x00000211 fields_present: 0x00ffffff logon_divs: 168 bad_password_count: 0x00000000 logon_count: 0x00000000 padding1[0..7]... logon_hrs[0..21]... Account Disabled : True Password does not expire : True Account locked out : False Password expired : False Interdomain trust account: False Workstation trust account: False Server trust account : False Trusted for delegation : False ``` --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://lyethar.gitbook.io/cascade/enumeration/other-services/smb.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.