security enabled verified low v1.0.0

enum4linux-ng

Python reimplementation of enum4linux for comprehensive SMB and NetBIOS enumeration of Windows and Active Directory targets.

📋 Live Preview 
enum4linux-ng -A {target}
🌍 target → ip 
enum4linux-ng -A {target}

Sandbox: execFile · Timeout: 120s

Capabilities

security.ad.enum.users
security.ad.enum.shares
security.ad.enum.groups
security.ad.enum.passwordpolicy
security.ad.enum.osinfo
security.ad.enum.sessions

Parameters

Name Type Required Default Description Aliases
target string Yes - Target IP address or hostname -t, --target
all boolean No Run all enumeration modules -A, --all
users boolean No Enumerate users -U, --users
shares boolean No Enumerate shares -S, --shares
password-policy boolean No Enumerate password policy -P, --password-policy
groups boolean No Enumerate groups -G, --groups
username string No - Username for authenticated enumeration -u, --username
password string No - Password for authenticated enumeration -p, --password
domain string No - Domain name for authentication -d, --domain
workgroup string No - Workgroup name (default: WORKGROUP) -w, --workgroup
output string No - Output directory for results -o, --output
timeout integer No 5 Timeout in seconds for network operations --timeout
N boolean No - Disable SMBv1 protocol -N, --no-smb1
R boolean No - Recursive share listing -R, --recursive-listing
q boolean No - Quiet mode (suppress banner) -q, --quiet
v boolean No - Verbose output -v, --verbose
w boolean No - string Workgroup (default WORKGROUP) -w, --workgroup

Contract

Inputs

network.target.ip

Target IP address

credential.username

Optional username for authenticated queries

credential.password

Optional password for authenticated queries

Outputs

security.ad.enum.users

List of domain/local users

security.ad.enum.shares

Available SMB shares

security.ad.enum.groups

Group memberships

security.ad.passwordpolicy

Domain password policy

Side effects: network_traffic

Workflow Edges

Produces

security.ad.enum.userssecurity.ad.enum.sharessecurity.ad.enum.groupssecurity.ad.passwordpolicy

Consumes

network.target.ipcredential.usernamecredential.password

Resource Profile

ResourceValue
CPUlow
Memory32 MB
Networklow
Disk I/Olow

Examples

Full enumeration with all modules

enum4linux-ng -A 10.10.10.1

Enumerate users only

enum4linux-ng -U 10.10.10.1

Authenticated enumeration with domain credentials

enum4linux-ng -A 10.10.10.1 -u jdoe -p Pass123 -d evilcorp.local

Enumerate password policy and shares

enum4linux-ng -P -S 10.10.10.1

Quiet mode with output to directory

enum4linux-ng -A 10.10.10.1 -q -o ./enum-results

Documentation

enum4linux-ng — SMB & NetBIOS Enumeration

enum4linux-ng is a Python rewrite of the original enum4linux.pl, providing comprehensive SMB and NetBIOS enumeration against Windows and Samba hosts.

Enumeration Modules

Module Flag Description
OS Info auto Detect operating system and version
Users -U List domain and local users
Groups -G List groups and members
Shares -S List SMB shares and permissions
Password Policy -P Extract domain password policy
Printers auto Enumerate printer shares
Sessions auto Detect logged-in users
RID Cycling auto Brute-force RIDs for user enumeration

Authentication Modes

  • Null session (no credentials): Limited information
  • Guest session: Slightly more access
  • Authenticated: Full enumeration with valid credentials

Dependencies

python3

Related Tools

smbclientsmbmaprpcclientimpacket

References