Oracle TNS Listener SID Enumeration

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle TNS Listener SID Enumeration', 'Description' = %q This module simply queries the TNS listener for the Oracle SID. With Oracle 9.2.0.8 and...

How to Configure User SID Enumeration in the XML Service

This article contains information about configuring the Citrix XML Service to perform enumeration of Security Identifiers SIDs for user accounts when using Single Sign-on SSO or smart card authentication to Web Interface 5.0. Background When using SSO or smart card authentication, access for user...

Microsoft Windows SMB LsaQueryInformationPolicy Function SID Enumeration Without Credentials

By emulating the call to LsaQueryInformationPolicy, it was possible to obtain the host SID Security Identifier, without credentials. The host SID can then be used to get the list of local users. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56210; scriptversion"1.5"...

SMB SID User Enumeration (LookupSid)

Determine what users exist via brute force SID lookups. This module can enumerate both local and domain accounts by setting ACTION to either LOCAL or DOMAIN This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Oracle Application Server Spy Servlet SID Enumeration

This module makes a request to the Oracle Application Server in an attempt to discover the SID. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle Application Server Spy Servlet SID...

Microsoft Windows SMB LsaQueryInformationPolicy Function SID Enumeration

By emulating the call to LsaQueryInformationPolicy, it was possible to obtain the host SID Security Identifier. The host SID can then be used to get the list of local users. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10859; scriptversion"1.47";...

Microsoft Windows SMB LsaQueryInformationPolicy Function NULL Session Domain SID Enumeration

By making or emulating a call to LsaQueryInformationPolicy, it was possible to obtain the domain SID Security Identifier. The domain SID can then be used to get the list of users of the domain. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10398; scriptversion"1.59"...