View Issue Details

IDProjectCategoryView StatusLast Update
0005488Kali Linux[All Projects] Kali Package Improvementpublic2020-02-10 17:39
Reporterg0tmi1k Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionopen 
Product Version 
Target VersionFixed in Version 
Summary0005488: enum4linux - Fix usage example
g0tmi1k@kali-dev:~$ enum4linux
enum4linux v0.8.9 (
Copyright (C) 2011 Mark Lowe (

Simple wrapper around the tools in the samba package to provide similar
functionality to enum.exe (formerly from Some additional
features such as RID cycling have also been added for convenience.

Usage: ./ [options] ip

Options are (like "enum"):
    -U get userlist
    -M get machine list*
    -S get sharelist
    -P get password policy information
    -G get group and member list
    -d be detailed, applies to -U and -S
    -u user specify username to use (default "")
    -p pass specify password to use (default "")

The following options from enum.exe aren't implemented: -L, -N, -D, -f

Additional options:
    -a Do all simple enumeration (-U -S -G -P -r -o -n -i).
              This opion is enabled if you don't provide any other options.
    -h Display this help message and exit
    -r enumerate users via RID cycling
    -R range RID ranges to enumerate (default: 500-550,1000-1050, implies -r)
    -K n Keep searching RIDs until n consective RIDs don't correspond to
              a username. Impies RID range ends at 999999. Useful
          against DCs.
    -l Get some (limited) info via LDAP 389/TCP (for DCs only)
    -s file brute force guessing for share names
    -k user User(s) that exists on remote system (default: administrator,guest,krbtgt,domain admins,root,bin,none)
              Used to get sid with "lookupsid known_username"
              Use commas to try several users: "-k admin,user1,user2"
    -o Get OS information
    -i Get printer information
    -w wrkg Specify workgroup manually (usually found automatically)
    -n Do an nmblookup (similar to nbtstat)
    -v Verbose. Shows full commands being run (net, rpcclient, etc.)

RID cycling should extract a list of users from Windows (or Samba) hosts
which have RestrictAnonymous set to 1 (Windows NT and 2000), or "Network
access: Allow anonymous SID/Name translation" enabled (XP, 2003).

NB: Samba servers often seem to have RIDs in the range 3000-3050.

Dependancy info: You will need to have the samba package installed as this
script is basically just a wrapper around rpcclient, net, nmblookup and
smbclient. Polenum from
is required to get Password Policy info.


Could `./` and `.pl` be removed?



2020-02-10 17:39

administrator   ~0012146

Due to the age of the OS (Kali Moto [v1], Kali Safi [v2], Kali Rolling <= 2019.2), these legacy versions are no longer supported.
We will be closing this ticket due to inactivity.

Please could you see if you are able to replicate this issue with the latest version of Kali Linux -

If you are still facing the same problem, feel free to re-open the ticket. If you choose to do this, could you provide more information to the issue you are facing, and also give information about your setup?
For more information, please read:

Issue History

Date Modified Username Field Change
2019-06-02 19:18 g0tmi1k New Issue
2020-02-10 17:39 g0tmi1k Note Added: 0012146
2020-02-10 17:39 g0tmi1k Status new => closed