enm

A simple script i made to quickly scan machines on HackTheBox.

---

Tools & scans

• nmap - fast port scan -sC -sV --top-ports 1000 --open (top 1000 ports)
• /etc/hosts - automatically adds new entries and replaces / removes old ones
• SMB - os info, shares, users & vuln scan via enum4linux-ng + nmap scripts (139/445)
• LDAP - domain context retrieval, anonymous enumeration, authenticated dump via ldapdomaindump (389/636)
• WinRM - detection hint (5985/5986)
• ffuf - directory, subdomain & vhost fuzzing (all open web ports)

Usage

enm <IP> [name]

#Example 
enm 10.129.244.177 -n snapped
enm 10.129.244.177 -u snapped -u admin -p 'P@ss1'

Installation

# Install dependencies
sudo apt update
sudo apt install curl nmap seclists ffuf enum4linux-ng  ldap-utils -y
pip install ldapdomaindump

# Clone and install
git clone https://github.com/yourusername/enm.git
cd enm

sudo cp enm.sh /usr/bin/enm
sudo chmod 755 /usr/bin/enm