> For the complete documentation index, see [llms.txt](https://ceh-practical.cavementech.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ceh-practical.cavementech.com/module-4.-enumeration/7.-rpc-smb-and-ftp-enumeration.md).

# 7. RPC, SMB and FTP Enumeration

## <mark style="color:red;">1. SMB and RPC (port 111) Enumeration with NetScanTools</mark>

Windows tool

{% embed url="<https://www.netscantools.com/nstpromain.html>" %}

<figure><img src="/files/Pfgr1SAuQ0wVA8ICUZOm" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/5YkEkYHskOTV97a6b0zh" alt=""><figcaption></figcaption></figure>

## <mark style="color:red;">2. Perform SMB, FTP and RPC Enumeration with Nmap</mark>

```
nmap -T5 -A 192.168.18.110
```

```
nmap -T5 -p 21 -A 192.168.18.110
```

SMB enumeration scripts are also available in Metasploit.

{% embed url="<https://www.youtube.com/watch?v=EGVexxavR48&list=PL-Fa25Pu8l6wrp7rSDuZYRe1pbtmpEGa-&index=3&pp=gAQBiAQB>" %}

{% embed url="<https://www.udemy.com/course/ethical-hacker-practical/?referralCode=289CF01CF51246BCAD6C>" %}