enum4linux-ng

enum4linux-ng

#Security Testing#Offensive Security

A guide on basic Linux privilege escalation techniques including enumeration, data analysis, exploit customization, and trial and error.

Visit Website

enum4linux-ng: A Modern Rewrite of a Classic Tool

enum4linux-ng is a rewritten version of Mark Lowe's original script, enum4linux.pl, which was developed at Portcullis Labs (now part of Cisco CX Security Labs). This tool is designed for gathering information from Windows and Samba systems, and it is particularly useful for security professionals and Capture The Flag (CTF) participants.

The tool serves primarily as a wrapper for Samba tools

The tool serves primarily as a wrapper for the Samba tools: nmblookup, net, rpcclient, and smbclient.

It has the same functionality as the original tool

This tool offers the same functionality as the original one. However, it enhances this by parsing all output generated by the Samba tools. Additionally, it allows users to export their findings in either YAML or JSON file formats, which makes it easier for other tools to import and process the data.

Features include support for YAML and JSON export

Features include support for exporting in both YAML and JSON formats, colored output in the console, a native implementation of ldapsearch and polenum, various authentication methods, compatibility with legacy SMBv1 connections, automatic detection of IPC signing, 'smart' enumeration capabilities, timeout support, and checking of SMB dialects.