enum4linux-ng
enum4linux-ng is a free open-source Python enumeration tool used to gather users, shares, and policy data from Windows and Samba hosts for pentesters.
0 upvotes · 0 downvotes
No ratings yet
- Category
- Offensive Security & Pentesting
- Pricing
- Free
- Platforms
- LinuxWindowsmacOS
- License
- Open source
- Reviewed
- Last reviewed 10 October 2026
- Links
- GitHub
What it is
A rewrite of the original enum4linux Perl script that wraps the Samba client utilities and parses their output. It queries SMB, RPC, and LDAP services and reports what a host exposes.
What it helps with
- Listing users, groups, and shares on a Windows or Samba host
- Reading password policy and domain details
- Checking SMB dialects and signing support
- Exporting findings as YAML or JSON for other tools
Who it's for
Penetration testers, CTF players, and administrators enumerating Windows and Samba systems they own or are authorized to assess.
Worth knowing
Smart enumeration skips tests that would fail, which speeds up scans and cuts noise. Legacy SMBv1 connections and several authentication methods are supported.
Can it find users by RID cycling?
Yes, RID cycling is available but is left out of the default run.
Can I turn off colored output?
Yes, it respects the NO_COLOR setting.
Discussion & reviews
0 comments
No contributions yet. Be the first to review or comment.