rpcclient -U '' <ip>
enumdomusers
Standard Port: 53/udp, 53/tcp nslookup server <ip> <ip> Recon Reverse Lookup over range ./dnsrecon.rb -t rvs -i 10.0.0.1,10.0.0.255 Standard Record...
Standard Port: 21/tcp Connect ftp <ip> Anonymous Login User: anonymous Password: <blank>
Standard Port: 389/tcp, 636/tcp Connectivity Test ldapsearch -h <ip> -x Base DN lookup ldapsearch -h <ip> -x -s base namingcontexts LDAP Anonymous Query ldapsearch ...
LDAP
SMB
