> ## Documentation Index
> Fetch the complete documentation index at: https://docs.bytejmp.com/llms.txt
> Use this file to discover all available pages before exploring further.

# enum4linux

> enum4linux: SMB and RPC enumeration for Active Directory — users, shares, groups, password policy.

## enum4linux

### Full Enumeration

```bash theme={"dark"}
enum4linux -a TARGET
```

### Users

```bash theme={"dark"}
enum4linux -U TARGET
```

### Shares

```bash theme={"dark"}
enum4linux -S TARGET
```

### Groups

```bash theme={"dark"}
enum4linux -G TARGET
```

### Password Policy

```bash theme={"dark"}
enum4linux -P TARGET
```

### With Credentials

```bash theme={"dark"}
enum4linux -a -u 'user' -p 'password' TARGET
```

### RID Cycling

```bash theme={"dark"}
enum4linux -r -u 'user' -p 'password' TARGET
```

***

## enum4linux-ng (Modern Version)

There is no `enum4linux-ng` PyPI package. Install via Kali's apt package or from source:

```bash theme={"dark"}
# Kali
apt install enum4linux-ng

# From source
git clone https://github.com/cddmp/enum4linux-ng && cd enum4linux-ng
pip install -r requirements.txt
```

```bash theme={"dark"}
enum4linux-ng -A TARGET
enum4linux-ng -A -u 'user' -p 'password' TARGET
enum4linux-ng -A TARGET -oJ output     # JSON output
```

***

## Flags

| Flag      | Description      |
| --------- | ---------------- |
| `-a`      | Full enumeration |
| `-U`      | Users            |
| `-S`      | Shares           |
| `-G`      | Groups           |
| `-P`      | Password policy  |
| `-r`      | RID cycling      |
| `-M`      | Machine list     |
| `-o`      | OS information   |
| `-n`      | Nmblookup        |
| `-u`/`-p` | Credentials      |

***

## What It Enumerates

* Workgroup/domain name
* Users via RID cycling
* Share enumeration
* Group membership
* Password policy
* OS information
* Printer information

***

## Quick Reference

| Task       | Command                                |
| ---------- | -------------------------------------- |
| Full enum  | `enum4linux -a TARGET`                 |
| With creds | `enum4linux -a -u user -p pass TARGET` |
| Users only | `enum4linux -U TARGET`                 |
| Modern     | `enum4linux-ng -A TARGET`              |