Enum4linux is an enumeration tool capable of detecting and extracting data from Windows and Linux operating systems, including those that are Samba (SMB) hosts on a network. Enum4linux is capable of discovering the following:
- Password policies on a target
- The operating system of a remote target
- Shares on a device (drives and folders)
- Domain and group membership
- User listings
To scan a target, use the following command: enum4linux target. The tool will perform all the checks and enumeration that it can perform. The output can be a bit overwhelming at first: be sure to check the details carefully as they will contain meaningful information about your target.
Enum4linux comes in handy at times for performing a scan on the network to discover any shared resources. In the next section, we will take a deep dive into LDAP enumeration on a Windows network.