# Enumeration

The following use cases assume you have a Kali Linux host connected to an internal network.

For the examples it is also assumed hosts are within a 192.168.1.0/24 IP space.

If nxc isnt giving output of any kind, you probably have something wrong with the command.

{% content-ref url="/pages/oLzwn1WkL4ONS7O44TIg" %}
[Enumerate Hosts](/smb-protocol/enumeration/enumerate-hosts.md)
{% endcontent-ref %}

{% content-ref url="/pages/AGm4U7FoUQL13tD0Dr51" %}
[Enumerate Null Sessions](/smb-protocol/enumeration/enumerate-null-sessions.md)
{% endcontent-ref %}

{% content-ref url="/pages/VrbccyScR4P5J5KCA2y2" %}
[Enumerate Guest Logon](/smb-protocol/enumeration/enumerate-guest-logon.md)
{% endcontent-ref %}

{% content-ref url="/pages/C6dwOHWl5w7hKYxt69iZ" %}
[Enumerate Hosts with SMB Signing Not Required](/smb-protocol/enumeration/smb-signing-not-required.md)
{% endcontent-ref %}

{% content-ref url="/pages/kFP39AnIh9WCA3Apn7SN" %}
[Enumerate Shares and Access](/smb-protocol/enumeration/enumerate-shares-and-access.md)
{% endcontent-ref %}

{% content-ref url="/pages/eUYPN5CY78wSrvUhRdDJ" %}
[Enumerate Disks](/smb-protocol/enumeration/enumerate-disks.md)
{% endcontent-ref %}

{% content-ref url="/pages/hg1rBHA16ZlILeKYI7kG" %}
[Enumerate Logged-On Users with the Remote Registry Service](/smb-protocol/enumeration/enumerate-logged-on-users-winreg.md)
{% endcontent-ref %}

{% content-ref url="/pages/A4OlT4ENFdKR3nnl443i" %}
[Enumerate Domain Users](/smb-protocol/enumeration/enumerate-domain-users.md)
{% endcontent-ref %}

{% content-ref url="/pages/iO8laAwQcH7lXWI32Hcl" %}
[Enumerate Users by Bruteforcing RID](/smb-protocol/enumeration/enumerate-users-by-bruteforcing-rid.md)
{% endcontent-ref %}

{% content-ref url="/pages/kPLPHdD8TAqDQOhHVEkm" %}
[Enumerate Domain Groups](/smb-protocol/enumeration/enumerate-domain-groups.md)
{% endcontent-ref %}

{% content-ref url="/pages/SxiKrlcMjMzAkZ12EHhG" %}
[Enumerate Local Groups](/smb-protocol/enumeration/enumerate-local-groups.md)
{% endcontent-ref %}

{% content-ref url="/pages/P69BclTbwSYgszJIwKXi" %}
[Enumerate Domain Password Policy](/smb-protocol/enumeration/enumerate-domain-password-policy-1.md)
{% endcontent-ref %}

{% content-ref url="/pages/575awctjeMkDOsl7RelH" %}
[Enumerate Primary Site Server and Distribution Point via recon6](/smb-protocol/enumeration/enumerate-sccm-primarysiteserver-and-distributionpoint.md)
{% endcontent-ref %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://www.netexec.wiki/smb-protocol/enumeration.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.