The host SID could be used to enumerate the names of the local users
of this host.
(we only enumerated users name whose ID is between 1000 and 1200
for performance reasons)
This gives extra knowledge to an attacker, which
is not a good thing :
- Administrator account name : Administrator (id 500)
- Guest account name : Guest (id 501)
- TsInternetUser (id 1000)
- IUSR_JMHL188 (id 1001)
- IWAM_JMHL188 (id 1002)
- IUSR_asandylee_com (id 1006)
- IUSR_88q8_com (id 1007)
- IUSR_shoushen_com (id 1008)
- IUSR_xq163.net (id 1010)
The following local accounts have never changed their password :
Administrator
Guest
TsInternetUser
IUSR_JMHL188
IWAM_JMHL188
IUSR_asandylee_com
IUSR_88q8_com
IUSR_shoushen_com
IUSR_xq163.net
那位大哥知道!告诉我一声了
谢谢!!!!
