enum4linux
enumerate information from Windows and Samba systems
TLDR
Enumerate using all methods
$ enum4linux -a [remote_host]
Enumerate using given credentials$ enum4linux -u [user_name] -p [password] [remote_host]
List usernames from a host$ enum4linux -U [remote_host]
List shares$ enum4linux -S [remote_host]
Get OS information$ enum4linux -o [remote_host]
SYNOPSIS
enum4linux [options] target
DESCRIPTION
enum4linux enumerates information from Windows and Samba systems using SMB. It extracts user lists, share information, group membership, password policies, and operating system details.
A Perl wrapper around tools like smbclient, rpcclient, and nmblookup for penetration testing.
PARAMETERS
-a
Do all simple enumeration-U
Get user list-S
Get share list-o
Get OS information-u user
Username for authentication-p password
Password for authentication-G
Get group information-P
Get password policy
CAVEATS
Security testing tool. Use only on systems you have permission to test. Some enumeration requires valid credentials. May trigger security alerts.