RPC enumeration

• rpcclient -U '' $IP (-U '': empty username)
• rpcclient -U '' -N $IP (-N: no password)
• rpcdump.py @$IP
• In rpcclient: enumdomusers
• Enumerate users: rpcclient -W '' -c querydispinfo -U''%'' $IP
• Alternatively, use enum4linux-ng to enumerate RPC automatically.