https://github.com/m8sec/nullinux

Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.
https://github.com/m8sec/nullinux

enumeration pentest-tool pentesting python recon smb

Last synced: about 19 hours ago
JSON representation

Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.

• Host: GitHub
• URL: https://github.com/m8sec/nullinux
• Owner: m8sec
• License: mit
• Created: 2016-04-28T16:45:02.000Z (over 8 years ago)
• Default Branch: master
• Last Pushed: 2024-06-19T14:29:09.000Z (5 months ago)
• Last Synced: 2024-10-30T06:09:35.299Z (15 days ago)
• Topics: enumeration, pentest-tool, pentesting, python, recon, smb
• Language: Python
• Homepage:
• Size: 101 KB
• Stars: 564
• Watchers: 26
• Forks: 101
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE

Awesome Lists containing this project

README

        
# nullinux

![](https://img.shields.io/badge/Python-2.7%20&%203+-blue.svg)  

![](https://img.shields.io/badge/License-MIT-green.svg)  

[![](https://img.shields.io/badge/Demo-Youtube-red.svg)](https://www.youtube.com/watch?v=akvWRGxxDp0)  

Nullinux is an internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB. If no username and password are provided in the command line arguments, an anonymous login, or null session, is attempted. Nullinux acts as a wrapper around the Samba tools smbclient & rpcclient to enumerate hosts using a variety of techniques.

Key Features:

* Single or multi-host enumeration

* Enumerate shares and list files in root directory

* Enumerate users & groups

* Multi-threaded RID Cycling

* Creates a formatted nullinux_users.txt output file free of duplicates for further exploitation

* Python 2.7 & 3 compatible

For more information, and example output, visit the [wiki page](https://github.com/m8r0wn/nullinux/wiki).

### Getting Started

In the Linux terminal run:

```

git clone https://github.com/m8sec/nullinux

cd nullinux

sudo bash setup.sh

```

### Usage

```

positional arguments:

  target                    Target server

optional arguments:

  -h, --help                show this help message and exit

  -v                        Verbose output

  -o OUTPUT_FILE            Output users to the specified file

  

Authentication:

  -u USERNAME, -U USERNAME  Username

  -p PASSWORD, -P PASSWORD  Password

  

Enumeration:

  -shares                 Enumerate shares only

  -users                  Enumerate users only

  -q, -quick              Fast user enumeration

  -r, -rid                Perform RID cycling only

  -range RID_RANGE        Set Custom RID cycling range (Default: '500-550')

  -T MAX_THREADS          Max threads for RID cycling (Default: 15)

  ```