enum4linux-ng

What it does

enum4linux-ng is a modern rewrite that enumerates users, shares, groups, and password policies from SMB/Windows hosts. It's go-to early-stage Active Directory and Windows recon.

Common use cases

• •Enumerate domain users, groups, and shares from an SMB server during initial AD recon.
• •Extract password policy information to determine lockout thresholds for password-spraying.
• •Identify local administrator accounts and OS information from anonymous SMB session.

Key features

• •Enumerates users, groups, shares, OS info, and password policy in one command.
• •Supports anonymous, guest, and authenticated SMB session enumeration.
• •Outputs machine-readable results in YAML format for further processing.
• •Modernized rewrite with no external dependencies beyond standard Python packages.

Source