enum4linux-ng
Modern rewrite of enum4linux: more reliable SMB/RPC enumeration, with JSON.
A modern Python rewrite of the classic enum4linux. It automates SMB/RPC enumeration against a Windows/Samba host: users, groups, shares, password policy and null/guest sessions, with structured JSON/YAML output. More reliable and maintainable than the Perl original.
Family SMB, NetBIOS & RPC
Flags -A -oJ out <ip>
Concepts SMB enumeration with a guest/null session, RID cycling
Cheatsheet SMB · 139 / 445
Installation
pipx install enum4linux-ngUseful commands
Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.