Tengu

Overview Schema Source Related Servers Discussions Admin

enum4linux_scan

Enumerate SMB/NetBIOS targets to extract users, groups, shares, and password policy. Identify security weaknesses in SMB configurations.

Instructions

Enumerate SMB/NetBIOS information using enum4linux-ng.

Args: target: Target IP or hostname running SMB (port 139/445). username: Optional username for authenticated enumeration. password: Optional password (will be redacted in logs). timeout: Override default timeout.

Returns: Users, groups, shares, and password policy from the target.

Note: - Requires SMB access (port 139 or 445). - Target must be in tengu.toml [targets].allowed_hosts.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "target": "<target>"
    },
    "name": "enum4linux_scan"
  }
}

Input Schema

Name	Required	Description	Default
`target`	Yes
`timeout`	No
`password`	No
`username`	No

Output Schema

Name	Required	Description	Default
No arguments

Schema Changelog

Changes observed during successful MCP inspections.

First observedv0.3.1Aug 2, 2026

TDQS

A3.7/5.0

Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses that passwords are redacted in logs and that the target must be pre-approved, which is useful. However, it does not mention that the tool actively connects to the target, potential noise or side effects, or how timeouts are handled, which are important for an active enumeration tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with clear sections (Args, Returns, Note), front-loaded with the primary purpose, and every sentence serves a purpose. It is concise and scannable.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that an output schema exists, the description appropriately summarizes return values rather than detailing them. It covers prerequisites, redaction behavior, and parameter purposes. It lacks comparison to alternatives and more on timeout semantics, but for a moderate-complexity scan tool, it is sufficiently complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description compensates by explaining each parameter: target (IP/hostname on SMB ports), username (optional for authenticated enumeration), password (redacted), and timeout (override default). This adds meaningful context beyond the schema's raw type definitions, though it could provide more details on format constraints.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'Enumerate SMB/NetBIOS information using enum4linux-ng' and lists returned data (users, groups, shares, password policy). It uses a specific verb and resource, and the tool name itself differentiates it, but it doesn't explicitly contrast with sibling SMB tools like smbmap_scan or nxc_enum.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides prerequisites (requires SMB access on port 139/445, target must be in allowed_hosts) but does not offer explicit when-to-use vs alternatives or when-not-to-use. Usage is implied for SMB enumeration, but no selection guidance is provided relative to similar tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server