Port
Protocol
udp
Identifying exposed RPC services
# Impacket rpcdump.py ${ip}
Connect to RPC with NULL password
NULL
sudo apt-get install smbclient rpcclient -U ${user} -N ${ip}