Re: [PEN-TEST] Finding a Windows machine that a user is logged into

[Fredrik Wallström <fredrik.wallstrom () NETMAN SE>]

Try the "Tell Me Where" utility from Securewave.com

http://www.securewave.com/products/free_utilities/free_utilities.html

It's a Windows GUI utility that will do the thing you want,
if you or anyone else find/know of a win32 command line utility that will do the same
please let me know aswell, been searching for such tool.

// Fredrik

-----Original Message-----
From: Penetration Testers [mailto:PEN-TEST () SECURITYFOCUS COM]On Behalf
Of Dawes, Rogan (ZA - Johannesburg)
Sent: den 13 mars 2001 09:08
To: PEN-TEST () SECURITYFOCUS COM
Subject: [PEN-TEST] Finding a Windows machine that a user is logged into


Hi Folks,

As part of a demonstration I want to do, I need to find a Windows client
that a particular user is logged in to.

e.g. on a Windows network, user rdawes is logged in somewhere. I need the IP
address, so that I can snoop the traffic that he is generating.

It is clearly possible to get this info, as for example tools like "net send
rdawes message" do it.  Having done that, I can look in my machine cache
using "nbtstat -c" to see who I've been talking to.

This is a bit obtrusive, though. I don't want to warn the user that I am
watching them, which the "net send" would do.

Does anyone have an idea how I can do this quietly?

Rogan