Network Discovery Commands

5 Network Discovery commands from the Enumeration category, each with its placeholders, supported authentication methods and upstream references.

Tools covered: impacket-DumpNTLMInfo, impacket-rdp_check, impacket-rpcdump, nmap, nxc

• Impacket DumpNTLMInfo Dump NTLM server information (OS version, domain, hostname) without credentials
• Impacket RDP Check Check if credentials are valid for RDP access
• Impacket RPCDump Enumerate RPC endpoints and interfaces registered on a remote host
• NetExec RDP NLA Screenshot Capture a pre-auth RDP login screen against hosts that have NLA enabled. Reveals OS branding, last logged-on…
• Nmap TCP Scan Comprehensive TCP port scan with service version detection and default scripts