Fetchfile found /usr/local/bin/../share/nmap/nmap-services Fetchfile found /usr/local/bin/../share/nmap/nmap.xsl # Nmap 7.01 scan initiated Thu Feb 18 10:28:38 2016 as: nmap -Pn --script smb* and not(dos or brute) -oA /Users/calderpwn/Code/calderon/smb2/win2012-trace --packet-trace -d3 -p139,445 192.168.0.21 --------------- Timing report --------------- hostgroups: min 1, max 100000 rtt-timeouts: init 1000, min 100, max 10000 max-scan-delay: TCP 1000, UDP 1000, SCTP 1000 parallelism: min 0, max 0 max-retries: 10, host-timeout: 0 min-rate: 0, max-rate: 0 --------------------------------------------- Fetchfile found /usr/local/bin/../share/nmap/nse_main.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/lpeg-utility.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/stdnse.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/strict.lua Fetchfile found /usr/local/bin/../share/nmap/scripts/script.db Fetchfile found /usr/local/bin/../share/nmap/scripts/smb-enum-domains.nse Fetchfile found /usr/local/bin/../share/nmap/nselib/msrpc.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/msrpctypes.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/unicode.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/unittest.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/nsedebug.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/listop.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/netbios.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/dns.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/ipOps.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/base32.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/smb.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/asn1.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/match.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/smbauth.lua Fetchfile found /usr/local/bin/../share/nmap/scripts/smb-enum-groups.nse Fetchfile found /usr/local/bin/../share/nmap/scripts/smb-enum-processes.nse Fetchfile found /usr/local/bin/../share/nmap/nselib/msrpcperformance.lua Fetchfile found /usr/local/bin/../share/nmap/scripts/smb-enum-sessions.nse Fetchfile found /usr/local/bin/../share/nmap/scripts/smb-enum-shares.nse Fetchfile found /usr/local/bin/../share/nmap/scripts/smb-enum-users.nse Fetchfile found /usr/local/bin/../share/nmap/scripts/smb-ls.nse Fetchfile found /usr/local/bin/../share/nmap/nselib/ls.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/tab.lua Fetchfile found /usr/local/bin/../share/nmap/nselib/strbuf.lua Fetchfile found /usr/local/bin/../share/nmap/scripts/smb-mbenum.nse Fetchfile found /usr/local/bin/../share/nmap/scripts/smb-os-discovery.nse Fetchfile found /usr/local/bin/../share/nmap/scripts/smb-print-text.nse Fetchfile found /usr/local/bin/../share/nmap/scripts/smb-psexec.nse Fetchfile found /usr/local/bin/../share/nmap/scripts/smb-security-mode.nse Fetchfile found /usr/local/bin/../share/nmap/scripts/smb-server-stats.nse Fetchfile found /usr/local/bin/../share/nmap/scripts/smb-system-info.nse Fetchfile found /usr/local/bin/../share/nmap/scripts/smb-vuln-ms10-061.nse Fetchfile found /usr/local/bin/../share/nmap/nselib/vulns.lua Fetchfile found /usr/local/bin/../share/nmap/scripts/smbv2-enabled.nse Fetchfile found /usr/local/bin/../share/nmap/nmap-payloads CONN (0.4117s) TCP localhost > 192.168.0.21:445 => Operation now in progress CONN (0.4118s) TCP localhost > 192.168.0.21:139 => Operation now in progress **TIMING STATS** (0.4118s): IP, probes active/freshportsleft/retry_stack/outstanding/retranwait/onbench, cwnd/ssthresh/delay, timeout/srtt/rttvar/ Groupstats (1/1 incomplete): 2/*/*/*/*/* 10.00/75/* 1000000/-1/-1 Current sending rates: 7462.69 packets / s. Overall sending rates: 7462.69 packets / s. CONN (0.4122s) TCP localhost > 192.168.0.21:139 => Connected Changing ping technique for 192.168.0.21 to connect to port 139 **TIMING STATS** (0.5164s): IP, probes active/freshportsleft/retry_stack/outstanding/retranwait/onbench, cwnd/ssthresh/delay, timeout/srtt/rttvar/ Groupstats (1/1 incomplete): 0/*/*/*/*/* 11.00/75/* 100000/540/5000 Current sending rates: 19.06 packets / s. Overall sending rates: 19.06 packets / s. CONN (1.5213s) TCP localhost > 192.168.0.21:445 => Operation now in progress **TIMING STATS** (1.5214s): IP, probes active/freshportsleft/retry_stack/outstanding/retranwait/onbench, cwnd/ssthresh/delay, timeout/srtt/rttvar/ Groupstats (1/1 incomplete): 1/*/*/*/*/* 11.00/75/* 100000/540/5000 Current sending rates: 2.70 packets / s. Overall sending rates: 2.70 packets / s. CONN (1.5220s) TCP localhost > 192.168.0.21:445 => Connected Ultrascan DROPPED probe packet to 192.168.0.21 detected Moving 192.168.0.21 to completed hosts list with 1 outstanding probe. Changing global ping host to 192.168.0.21. Nmap scan report for 192.168.0.21 Host is up, received user-set (0.00056s latency). Scanned at 2016-02-18 10:28:38 EST for 1s PORT STATE SERVICE REASON 139/tcp open netbios-ssn syn-ack 445/tcp open microsoft-ds syn-ack Host script results: | smb-enum-domains: |_ ERROR: No accounts left to try | smb-enum-groups: |_ ERROR: Couldn't enumerate groups: No accounts left to try | smb-enum-processes: |_ ERROR: No accounts left to try | smb-enum-shares: |_ ERROR: Couldn't enumerate shares: No accounts left to try | smb-enum-users: | ERROR: Couldn't enumerate users | ERROR: SAMR returned No accounts left to try |_ ERROR: LSA returned No accounts left to try | smb-mbenum: |_ ERROR: Failed to connect to browser service: No accounts left to try | smb-os-discovery: |_ ERROR: No accounts left to try |_smb-print-text: false | smb-psexec: Can't find the service file: nmap_service.exe (or nmap_service). | Due to false positives in antivirus software, this module is no | longer included by default. Please download it from | https://nmap.org/psexec/nmap_service.exe |_and place it in nselib/data/psexec/ under the Nmap DATADIR. | smb-security-mode: | account_used: | authentication_level: user | challenge_response: supported |_ message_signing: disabled (dangerous, but default) | smb-system-info: |_ ERROR: No accounts left to try |_smb-vuln-ms10-061: No accounts left to try |_smbv2-enabled: Server supports SMBv2 protocol Read from /usr/local/bin/../share/nmap: nmap-payloads nmap-services. # Nmap done at Thu Feb 18 10:28:39 2016 -- 1 IP address (1 host up) scanned in 1.56 seconds