Polenum

Polenum is a Python script that retrieves password policy details from Windows machines, including minimum password length, password history, complexity flags, lockout settings, and more. It authenticates using provided credentials and connects via SMB protocols on ports 139 or 445.

Use cases include penetration testing and security assessments where understanding the target system's password policy helps plan attacks like password spraying or brute-forcing. It supports non-Windows operating systems like Linux, Mac OS X, and BSD, making it accessible for cross-platform reconnaissance.

The tool relies on the Impacket library and can parse policies from both domain and builtin contexts, providing flags for password complexity, lockout thresholds, and account durations.

Polenum uses the Impacket library to establish SMB connections (protocols 139/SMB or 445/SMB) with a Windows target using supplied credentials. It authenticates as the specified user, enumerates domains (e.g., WIN7-X86, Builtin), and queries password policy attributes like minimum length, age, complexity flags (bitmask 000000), lockout counters, and durations. Results are parsed and displayed in a structured format without requiring local Windows access.