- Enum4Linux
	- `enum4linux –a 10.0.0.1`
	- `python3 enum4linux-ng <IP>`
- RPCBind
	- `rpcinfo –p x.x.x.x`
- Scan subnet for Windows/Samba
	- `nbtscan x.x.x.x`
- Nmap
	- `nmap IPADDR --script smb-enum-domains.nse,smb-enum-groups.nse,smb-enum-processes.nse,smb-enum-sessions.nse,smb-enum-shares.nse,smb-enum-users.nse,smb-ls.nse,smb-mbenum.nse,smb-os-discovery.nse,smb-print-text.nse,smb-psexec.nse,smb-security-mode.nse,smb-server-stats.nse,smb-system-info.nse,smb-vuln-conficker.nse,smb-vuln-cve2009-3103.nse,smb-vuln-ms06-025.nse,smb-vuln-ms07-029.nse,smb-vuln-ms08-067.nse,smb-vuln-ms10-054.nse,smb-vuln-ms10-061.nse,smb-vuln-regsvc-dos.nse`
- SMBClient
	- List available shares
		- `smbclient -L //INSERTIPADDRESS/`
	- Browse share
		- `smbclient //INSERTIPADDRESS/ipc$ -U john`