ENUM4LINUX¶
Enum4linux is a Linux-based command-line tool used for gathering information from Windows machines and Samba servers. It is a popular tool among penetration testers and security professionals for performing SMB (Server Message Block) enumeration.
BASIC USAGE¶
- Basic enumeration of a target
enum4linux [IP-ADDRESS]
- Full basic enumeration (all options)
enum4linux -a [IP-ADDRESS]
USER AND GROUP ENUMERATION¶
- Enumerate users
enum4linux -U [IP-ADDRESS]
- Enumerate users with credentials
enum4linux -u [USERNAME] -p [PASSWORD] -U [IP-ADDRESS]
- Enumerate groups
enum4linux -G [IP_ADDRESS]
- Enumerate groups with credentials
enum4linux -u [USERNAME] -p [PASSWORD] -G [IP-ADDRESS]
RID CYCLING¶
- Perform RID cycling to enumerate users
enum4linux -r [IP-ADDRESS]
- Perform RID cycling with credentials
enum4linux -u [USERNAME] -p [PASSWORD] -r [IP-ADDRESS]
SHARE ENUMERATION¶
- List shares on the target
enum4linux -S [IP-ADDRESS]
- List shares with credentials
enum4linux -u [USERNAME] -p [PASSWORD] -S [IP-ADDRESS]
- List publicly accessible shares
enum4linux -s [IP-ADDRESS]
- List publicly accessible shares with credentials
enum4linux -u [USERNAME] -p [PASSWORD] -s [IP-ADDRESS]
PASSWORD POLICY ENUMERATION¶
- Retrieve password policy
enum4linux -P [IP-ADDRESS]
- Retrieve password policy with credentials
enum4linux -u [USERNAME] -p [PASSWORD] -P [IP-ADDRESS]
DOMAIN AND WORKGROUP INFORMATION¶
- Get domain and workgroup information
enum4linux -n [IP-ADDRESS]
- Get domain and workgroup information with credentials
enum4linux -u [USERNAME] -p [PASSWORD] -n [IP-ADDRESS]
OS INFORMATION¶
- Get OS information
enum4linux -o [IP-ADDRESS]
- Get OS information with credentials
enum4linux -u [USERNAME] -p [PASSWORD] -o [IP-ADDRESS]
DETAILED REPORT¶
- Perform all basic checks
enum4linux -a [IP-ADDRESS]
- Perform all basic checks with credentials
enum4linux -u [USERNAME] -p [PASSWORD] -a [IP-ADDRESS]
MISCELLANEOUS¶
- List hostnames
enum4linux -i [IP-ADDRESS]
- List hostnames with credentials
enum4linux -u [USERNAME] -p [PASSWORD] -i [IP-ADDRESS]
- Check for null sessions
enum4linux -N [IP-ADDRESS]
- Check for null sessions with credentials
enum4linux -u [USERNAME] -p [PASSWORD] -N [IP-ADDRESS]
- List all available options
enum4linux -A [IP-ADDRESS]
- List all available options with credentials
enum4linux -u [USERNAME] -p [PASSWORD] -A [IP-ADDRESS]