enum4linux

Enumerate information from Windows/Samba (SMB) hosts.

KaliParrotmedium

pkg: enum4linux

enum4linux wraps Samba tools to extract users, shares, groups, password policy and OS info from SMB services.

Syntax

enum4linux [-a] {target}

Example

enum4linux -a 10.0.0.5

Runs all enumeration checks (users, shares, policy, groups) against the SMB host.

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

-aDo everything (users, shares, groups, policy).
-UEnumerate users.
-SEnumerate shares.
-PGet the password policy.
-GEnumerate groups.
-u <guest>Username for an authenticated session.
-p <value>Password.

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

enum4linux

Usage examples

enum4linux -a 10.0.0.5

Full enumeration of an SMB host.

enum4linux -U -S 10.0.0.5

Just users and shares.

Advantages
  • Rich SMB/AD enumeration in one command
  • Reveals users, shares and policies
  • Great early AD recon
Disadvantages
  • Noisy and clearly malicious in logs
  • Depends on null/guest access
  • Legacy Perl; see enum4linux-ng
Tags
#smb#windows#ad

Official docs: enum4linux

Related commands

Frequently asked questions

What is enum4linux used for?
enum4linux wraps Samba tools to extract users, shares, groups, password policy and OS info from SMB services.
What is an example enum4linux command?
A common example is: enum4linux -a 10.0.0.5 — Runs all enumeration checks (users, shares, policy, groups) against the SMB host.
Is enum4linux part of Kali Linux?
Yes. enum4linux ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install enum4linux.
What category of security tool is enum4linux?
enum4linux is a Information Gathering tool with a medium-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →