diff --git a/plugins/generic/enumeration.py b/plugins/generic/enumeration.py
index 4755b039d..9e831e46b 100644
--- a/plugins/generic/enumeration.py
+++ b/plugins/generic/enumeration.py
@@ -171,7 +171,7 @@ class Enumeration:
             indexRange = getRange(count, plusOne=plusOne)
 
             for index in indexRange:
-                if kb.dbms == DBMS.SYBASE:
+                if kb.dbms in (DBMS.SYBASE, DBMS.MAXDB):
                     query = rootQuery.blind.query % (kb.data.cachedUsers[-1] if kb.data.cachedUsers else " ")
                 elif condition:
                     query = rootQuery.blind.query2 % index
diff --git a/xml/queries.xml b/xml/queries.xml
index 3b0d4b6bc..3e3014c52 100644
--- a/xml/queries.xml
+++ b/xml/queries.xml
@@ -436,6 +436,7 @@
         <substring query="SUBSTR((%s), %d, %d)"/>
         <users>
             <inband query="SELECT username FROM domain.users ORDER BY 1"/>
+            <blind query="SELECT MIN(username) FROM domain.users WHERE username > '%s'" count="SELECT CHR(COUNT(*)) FROM domain.users"/>
         </users>
         <tables>
             <inband query="SELECT tablename FROM domain.tables WHERE schemaname='%s' AND type='TABLE'"/>