135 MSRPC

Enumerate users with Description (No creds)

nxc smb $ip -u "" -p "" --users 

Null Authentication

rpcclient -U "" -N 10.10.10.161

rpcclient internal commands

enumdomusers
enumdomgroups
enumprinters
------------------
queryuser 0x450
------------------
querydispinfo
querydominfo
------------------
lookupnames
lookupsids
------------------
createdomuser
deletedomuser
------------------
lsaaddacctrights
lsaremoveacctrights
dsroledominfo
dsenumdomtrusts