You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
enum4linux-ng.py 192.168.125.131 -u Tester -p 'Start123!' -oY out
61
+
```
54
62
55
63
A user 'Tester' with password 'Start123!' was created. Firewall access was allowed. Once the enumeration is finished, I scroll up so that the results become more clear. Since no other enumeration option is specified, the tool will assume ```-A``` which behaves similar to enum4linux ```-a``` option. User and password are passed in. The ```-oY``` option will export all enumerated data as YAML file for further processing in ```out.yaml```. The tool automatically detects at the beginning that LDAP is not running on the remote host. It will therefore skip any further LDAP checks which would normally be part of the default enumeration.
56
64
@@ -59,14 +67,16 @@ A user 'Tester' with password 'Start123!' was created. Firewall access was allow
59
67
#### Metasploitable 2
60
68
The second demo shows a run against Metasploitable 2. The following command is being used:
61
69
62
-
```enum4linux-ng.py 192.168.125.145 -A -C```
70
+
```console
71
+
enum4linux-ng.py 192.168.125.145 -A -C
72
+
```
63
73
64
74
This time the ```-A``` and ```-C``` option are used. While the first one behaves similar to enum4linux ```-a``` option, the second one will enable enumeration of services. This time no credentials were provided. The tool automatically detects that it needs to use SMBv1. No YAML or JSON file is being written. Again I scroll up so that the results become more clear.
There are multiple ways to install the tool. Either the tool comes as a package with your Linux distribution or you need to do a manual install.
121
131
122
-
### Kali Linux
123
-
```console
124
-
# apt install enum4linux-ng
125
-
```
132
+
### Automatic Installation
133
+
I'm aware of the following Linux distributions which package the tool:
134
+
135
+
#### Archstrike
126
136
127
-
### Archstrike
128
137
```console
129
-
# pacman -S enum4linux-ng
138
+
pacman -S enum4linux-ng
130
139
```
131
140
132
-
### NixOS
141
+
####NixOS
133
142
(tested on NixOS 20.9)
143
+
134
144
```console
135
-
$ nix-env -iA nixos.enum4linux-ng
145
+
nix-env -iA nixos.enum4linux-ng
136
146
```
137
-
138
-
## Manual Installation
139
-
If your Linux distribution does not offer a package, the following manual installation methods can be used instead.
140
-
141
-
### Dependencies
147
+
### Manual Installation
148
+
#### Dependencies
142
149
The tool uses the samba clients tools, namely:
143
150
- nmblookup
144
151
- net
@@ -157,67 +164,69 @@ For a faster processing of YAML (optional!) also install (should come as a depen
157
164
158
165
Some examples for specific Linux distributions installations are listed below. Alternatively, distribution-agnostic ways (python pip, python virtual env and Docker) are possible.
159
166
160
-
### Linux distribution specific
167
+
####Linux distribution specific
161
168
For all distribution examples below, LibYAML is already a dependency of the corresponding PyYaml package and will be therefore installed automatically.
(For Ubuntu 18.04 or below use the Docker or Python virtual environment variant)
181
+
##### Kali Linux/Debian/Ubuntu/Linux Mint
182
+
(tested on Kali Linux 2020.1, recent Debian (e.g. Buster) or Ubuntu versions should work, for Ubuntu 18.04 or below use the Docker or Python virtual environment variant)
Remember you need to still install the samba tools as mentioned above. In addition, make sure you run ```source venv/bin/activate``` everytime you spawn a new shell. Otherwise the wrong Python interpreter with the wrong libraries will be used (your system one rather than the virtual environment one).
0 commit comments