fabaff/enum4linux-ng

enum4linux-ng is a security tool that helps you figure out what a Windows or Samba file-sharing system is exposing on a network. Think of it as a friendly interrogator: you point it at a target computer, and it asks a long list of questions to map out what's visible, users, groups, shared folders, password policies, printers, and basic operating system details. It's aimed at security professionals and people who do capture-the-flag hacking competitions, where understanding a target's exposed surface is the first step. At a high level, the tool works by automating a collection of existing Samba command-line utilities, programs like nmblookup, net, rpcclient, and smbclient that can talk to Windows and Samba systems. Instead of running each one by hand and reading through raw output, you run a single command and get a tidy, color-coded summary. It also has a "smart" mode: before running all its checks, it probes whether things like LDAP or SMB are even available, then skips any tests that would just fail. If you hit Ctrl+C partway through, it saves whatever it found so far. One notable upgrade over the original tool is that results can be exported as structured data, JSON or YAML files, so other programs can import and analyze them automatically. That makes it easier to chain into larger workflows or reporting pipelines. It also includes IPv6 support (experimental), timeout handling, and a Docker-based install option for people who want to avoid dependency headaches. You'd use this if you're auditing a network you own or are authorized to test, and need a quick inventory of what a Windows or Samba host is advertising. The README is clear that illegal use is prohibited. A typical run might look like: point the tool at an IP address, optionally pass a username and password, and let it report back which shares exist, what users are listed, and what the password policy looks like.