Alternatives to enum4linux-ng
Inspect information exposed by Windows and Samba services. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
enum4linux-ng
Inspect information exposed by Windows and Samba services.
Replacements
Listings that take over the same core job as enum4linux-ng.
NetExec
Assess network services during authorized enterprise security tests.
NetExec groups service checks and authentication testing across enterprise network services, runs on Windows, macOS and Linux, and is licensed BSD-2-Clause.
Impacket
Python library and tool collection for working with network protocols.
Impacket is a Python library with example scripts for SMB, MSRPC and Kerberos, offering more depth but requiring protocol knowledge rather than organized reports.
Similar software
Related functionality, not a direct replacement.
ADRecon
A PowerShell script that gathers Active Directory information and builds an Excel report of the environment.
Kerbrute
Enumerates Active Directory usernames and tests passwords through Kerberos.
Responder
LLMNR, NBT-NS and mDNS testing tool for internal network assessments.
SharpHound
A C# collector that gathers Active Directory data for attack path analysis in BloodHound.
BloodHound Community Edition
Maps attack paths through Active Directory and Entra ID relationships.
Evil-WinRM
WinRM shell for post-exploitation work on Windows with valid credentials.
