v0.8.9

Author: Tim Brown

CHANGELOG

@@ -1,3 +1,8 @@
+2012-11-30 Enum4linux v0.8.9
+
+* -d option decodes some of the acb_info field including
+  if account is disabled, password expired, acct locked.
+
 2011-06-16 Enum4linux v0.8.8
 
 * Bug fix: -w option should now work better.  Allows 

enum4linux.pl

@@ -47,7 +47,7 @@
 use Data::Dumper;
 use Scalar::Util qw(tainted);
 
-my $VERSION="0.8.8";
+my $VERSION="0.8.9";
 my $verbose = 0;
 my $debug = 0;
 my $global_fail_limit = 1000;     # no command line option yet
@@ -928,7 +928,53 @@ sub get_user_details_from_rid {
 	print "[V] Attempting to get detailed user info with command: $command\n" if $verbose;
 	my $user_info = `$command`;
 	($user_info) = $user_info =~ /([^\n]*User Name.*logon_hrs[^\n]*)/s;
-	print "$user_info\n\n" if defined($user_info);
+	print "$user_info\n" if defined($user_info);
+	my ($acb_info) = $user_info =~ /acb_info\s+:\s+0x([0-9a-fA-F]+)/;
+	if ($acb_info) {
+		my $acb_int = hex($acb_info);
+		my $pad = "\t";
+		if ($acb_int & 0x00000001) {
+			printf $pad . "%-25.25s: %s\n", "Account Disabled", "True";
+		} else {
+			printf $pad . "%-25.25s: %s\n", "Account Disabled", "False";
+		}
+		if ($acb_int & 0x00000200) {
+			printf $pad . "%-25.25s: %s\n", "Password does not expire", "True";
+		} else {
+			printf $pad . "%-25.25s: %s\n", "Password does not expire", "False";
+		}
+		if ($acb_int & 0x00000400) {
+			printf $pad . "%-25.25s: %s\n", "Account locked out", "True";
+		} else {
+			printf $pad . "%-25.25s: %s\n", "Account locked out", "False";
+		}
+		if ($acb_int & 0x00020000) {
+			printf $pad . "%-25.25s: %s\n", "Password expired", "True";
+		} else {
+			printf $pad . "%-25.25s: %s\n", "Password expired", "False";
+		}
+		if ($acb_int & 0x00000040) {
+			printf $pad . "%-25.25s: %s\n", "Interdomain trust account", "True";
+		} else {
+			printf $pad . "%-25.25s: %s\n", "Interdomain trust account", "False";
+		}
+		if ($acb_int & 0x00000080) {
+			printf $pad . "%-25.25s: %s\n", "Workstation trust account", "True";
+		} else {
+			printf $pad . "%-25.25s: %s\n", "Workstation trust account", "False";
+		}
+		if ($acb_int & 0x00000100) {
+			printf $pad . "%-25.25s: %s\n", "Server trust account", "True";
+		} else {
+			printf $pad . "%-25.25s: %s\n", "Server trust account", "False";
+		}
+		if ($acb_int & 0x00002000) {
+			printf $pad . "%-25.25s: %s\n", "Trusted for delegation", "True";
+		} else {
+			printf $pad . "%-25.25s: %s\n", "Trusted for delegation", "False";
+		}
+	}
+	print "\n";
 }
 
 sub invalid_rid {