Standard Port: 445/tcp
smbclient -L <ip>
crackmapexec smb <ip> --pass-pol -u '' -p ''
crackmapexec smb <ip> -u <users file> -p <pw file>
Standard Port: 53/udp, 53/tcp nslookup server <ip> <ip> Recon Reverse Lookup over range ./dnsrecon.rb -t rvs -i 10.0.0.1,10.0.0.255 Standard Record...
Standard Port: 21/tcp Connect ftp <ip> Anonymous Login User: anonymous Password: <blank>
Standard Port: 389/tcp, 636/tcp Connectivity Test ldapsearch -h <ip> -x Base DN lookup ldapsearch -h <ip> -x -s base namingcontexts LDAP Anonymous Query ldapsearch ...
RPC
Restricted Shell Escapes
