Active Directory

enum4linux-ng

SMB and Windows enumeration.

adsmb

enum4linux-ng — terminal

$ enum4linux-ng -A 10.0.0.5

What it does

enum4linux-ng is a modern rewrite that enumerates users, shares, groups, and password policies from SMB/Windows hosts. It's go-to early-stage Active Directory and Windows recon.

Source

https://github.com/cddmp/enum4linux-ng ↗

More Active Directory tools

CrackMapExecSwiss-army knife for AD network post-exploitation.ImpacketPython toolkit of network-protocol scripts.GetNPUsers.pyAS-REP roasting via Impacket.LDAPDomainDumpDump Active Directory contents via LDAP.

Need hosted scanning instead of local tooling?

Run a scan in the browser →