You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
enum4linux-ng.py 192.168.125.131 -u Tester -p 'Start123!' -oY out
57
+
```
54
58
55
59
A user 'Tester' with password 'Start123!' was created. Firewall access was allowed. Once the enumeration is finished, I scroll up so that the results become more clear. Since no other enumeration option is specified, the tool will assume ```-A``` which behaves similar to enum4linux ```-a``` option. User and password are passed in. The ```-oY``` option will export all enumerated data as YAML file for further processing in ```out.yaml```. The tool automatically detects at the beginning that LDAP is not running on the remote host. It will therefore skip any further LDAP checks which would normally be part of the default enumeration.
56
60
@@ -59,14 +63,16 @@ A user 'Tester' with password 'Start123!' was created. Firewall access was allow
59
63
#### Metasploitable 2
60
64
The second demo shows a run against Metasploitable 2. The following command is being used:
61
65
62
-
```enum4linux-ng.py 192.168.125.145 -A -C```
66
+
```console
67
+
enum4linux-ng.py 192.168.125.145 -A -C
68
+
```
63
69
64
70
This time the ```-A``` and ```-C``` option are used. While the first one behaves similar to enum4linux ```-a``` option, the second one will enable enumeration of services. This time no credentials were provided. The tool automatically detects that it needs to use SMBv1. No YAML or JSON file is being written. Again I scroll up so that the results become more clear.
Remember you need to still install the samba tools as mentioned above. In addition, make sure you run ```source venv/bin/activate``` everytime you spawn a new shell. Otherwise the wrong Python interpreter with the wrong libraries will be used (your system one rather than the virtual environment one).
0 commit comments