RPC - 111
if you notice rpcbind ports open with other various ports labeled “mount” or “nfs” perform an nfs scan immediately
ls /usr/share/nmap/scripts/ | grep RPC
rpcinfo –p x.x.x.x
#Find available .nse scripts in the default directory for each service
ls /usr/share/nmap/scripts/ | grep rpc
bitcoinrpc-info.nse,deluge-rpc-brute.nse,metasploit-msgrpc-brute.nse,metasploit-xmlrpc-brute.nse,msrpc-enum.nse,nessus-xmlrpc-brute.nse,rpcap-brute.nse,rpcap-info.nse,rpc-grind.nse,rpcinfo.nse,xmlrpc-methods.nseLast updated