m8sec/nullinux

Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.

nullinux

        

Nullinux is an internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB. If no username and password are provided in the command line arguments, an anonymous login, or null session, is attempted. Nullinux acts as a wrapper around the Samba tools smbclient & rpcclient to enumerate hosts using a variety of techniques.

Key Features:

• Single or multi-host enumeration
• Enumerate shares and list files in root directory
• Enumerate users & groups
• Multi-threaded RID Cycling
• Creates a formatted nullinux_users.txt output file free of duplicates for further exploitation
• Python 2.7 & 3 compatible

For more information, and example output, visit the wiki page.

Getting Started

In the Linux terminal run:

git clone https://github.com/m8sec/nullinux
cd nullinux
sudo bash setup.sh

Usage

positional arguments:
  target                    Target server
optional arguments:
  -h, --help                show this help message and exit
  -v                        Verbose output
  -o OUTPUT_FILE            Output users to the specified file
  
Authentication:
  -u USERNAME, -U USERNAME  Username
  -p PASSWORD, -P PASSWORD  Password
  
Enumeration:
  -shares                 Enumerate shares only
  -users                  Enumerate users only
  -q, -quick              Fast user enumeration
  -r, -rid                Perform RID cycling only
  -range RID_RANGE        Set Custom RID cycling range (Default: '500-550')
  -T MAX_THREADS          Max threads for RID cycling (Default: 15)

nullinux's Issues

UDP

While setting port with -p is there a way to set an UDP port?

Coding is/was a little off for me

When i would run with a range of ip addresses the code would completely ignore the range and go from the third octet and count from there.
I changed line 271 to for x in range(int(c[3]), int(b)+1): from for x in range(int(c[2]), int(b)+1):

Thank you,
Have a great day
-Momo

djfj

dkkf

Syntax error?

The script contains an extra comma

%> python nullinux.py
  File "nullinux.py", line 89
    print "\n   ",
                ^
SyntaxError: Missing parentheses in call to 'print'. Did you mean print(print "\n   ", end=" ")?