Connect rpcclient -U '' <ip> User Enumeration enumdomusers
LDAP
Standard Port: 389/tcp, 636/tcp Connectivity Test ldapsearch -h <ip> -x Base DN lookup ldapsearch -h <ip> -x -s base namingcontexts LDAP Anonymous Query ldapsearch ...
FTP
Standard Port: 21/tcp Connect ftp <ip> Anonymous Login User: anonymous Password: <blank>
DNS
Standard Port: 53/udp, 53/tcp nslookup server <ip> <ip> Recon Reverse Lookup over range ./dnsrecon.rb -t rvs -i 10.0.0.1,10.0.0.255 Standard Record...
OverTheWire - Bandit
Level 0 Password (given): bandit0 ssh bandit0@bandit.labs.overthewire.org -p 2220 ls -al cat readme Level 1 Password: boJ9jbbUNNfktd78OOpsqOltutMc3MY1 ssh bandit1@bandit.labs.overthewire.org ...