enum4linux-ng
What it’s for
Enumerates information from Windows and Samba hosts over SMB: shares, users, groups and password policy.
Where it shines
- Quick SMB recon on internal tests
- Pulls a lot from a single command
Where it falls down
- Compatability issues with out of date binaries.
My take
I like this tool in some instances, but there are other methods to get the same result. While I will run it on most engagements, for it to work well it either requires Null auth to be enabled, or you need user creds.