[short_descr]
A next generation version of enum4linux. (a Windows/Samba enumeration tool)
[/short_descr]
[long_descr]
enum4linux-ng.py is a rewrite of enum4linux.pl, a tool for enumerating information from Windows and Samba systems, aimed for security professionals and CTF players. The tool is mainly a wrapper around the Samba tools nmblookup, net, rpcclient and smbclient.
Features:
=> support for YAML and JSON export
=> colored console output (can be disabled via NO_COLOR)
=> ldapsearch and polenum are natively implemented
=> support for multiple authentication methods
=> support for legacy SMBv1 connections
=> auto detection of IPC signing support
=> 'smart' enumeration will automatically disable tests which would otherwise fail
=> timeout support
=> SMB dialect checks
=> IPv6 support (experimental)
Differences
Some things are implemented differently compared to the original enum4linux.
These are the important differences:
=> RID cycling is not part of the default enumeration (-A) but can be enabled with -R
=> RID cycling can be achieved faster, by grouping multiple SID lookups in the same rpcclient call
=> parameter naming is slightly different (e.g. -A instead of -a)
[/long_descr]
[link] https://github.com/cddmp/enum4linux-ng [/link]
[tags] network, samba, windows [/tags]
[short_descr] A next generation version of enum4linux. (a Windows/Samba enumeration tool) [/short_descr]
[long_descr] enum4linux-ng.py is a rewrite of enum4linux.pl, a tool for enumerating information from Windows and Samba systems, aimed for security professionals and CTF players. The tool is mainly a wrapper around the Samba tools
nmblookup
,net
,rpcclient
andsmbclient
.Features: => support for YAML and JSON export => colored console output (can be disabled via NO_COLOR) => ldapsearch and polenum are natively implemented => support for multiple authentication methods => support for legacy SMBv1 connections => auto detection of IPC signing support => 'smart' enumeration will automatically disable tests which would otherwise fail => timeout support => SMB dialect checks => IPv6 support (experimental)
Differences Some things are implemented differently compared to the original enum4linux. These are the important differences:
=> RID cycling is not part of the default enumeration (
-A
) but can be enabled with-R
=> RID cycling can be achieved faster, by grouping multiple SID lookups in the same rpcclient call => parameter naming is slightly different (e.g.-A
instead of-a
) [/long_descr][image] [/image] [image] [/image]