Find Windows username via Linux

hack3rcon · 09-27-2015, 05:00 AM

Hello.
I want to know which user logging to Computer A but how can I find it?
I used "nmblookup -A IP" and it show me the computer name and Domain name but how about finding Username?

Any idea?

Thank you.

michaelk · 09-28-2015, 03:13 AM

nmblookup is a samba utility used to query NetBIOS names and map them to IP addresses using NetBIOS over TCP/IP
queries.

smbstatus is a program to list the current Samba connections which includes usernames.

Those are just samba utilities and does not show those logged in via other methods like ssh, telnet, ftp, or using nfs.

hack3rcon · 09-28-2015, 04:05 AM

Oh.
I read "http://toasterz.com/node/27" too but in your idea can I find anyway for find who longing on a remote PC?

michaelk · 09-28-2015, 07:52 AM

Look at the log files.

hack3rcon · 09-28-2015, 02:12 PM

Quote:

Originally Posted by michaelk

Look at the log files.

Look at the log file on remote system? Can it show current user?

michaelk · 09-28-2015, 03:23 PM

Like many of your questions it lacks details and we have to guess or make assumptions. Check out this following article.

http://www.networkcircus.com/articles/20090606.html

suicidaleggroll · 09-28-2015, 03:32 PM

Are you asking for a way to determine the name of the user logged in on a remote system using just it's IP address? No I don't believe you can do that, it would be a huge security vulnerability.

hack3rcon · 09-29-2015, 11:30 AM

Quote:

Originally Posted by suicidaleggroll

Are you asking for a way to determine the name of the user logged in on a remote system using just it's IP address? No I don't believe you can do that, it would be a huge security vulnerability.

Yes but PStool in windows have some features for it.

suicidaleggroll · 09-29-2015, 11:38 AM

Sure, provided the remote system has been configured to allow them to work. You can't just ping any old Windows IP and get information about who's using it, which is what it sounded like you were looking for. If you do have admin control over the remote machine, then why can't you use PsTools, or any other remote administration tool?