remote-access-enumeration

Enumerate FTP, SSH, RDP, VNC, and WinRM services on target hosts.

253|37|Updated Feb 22, 2026
One-click install
npx skills add https://github.com/blacklanternsecurity/red-run --skill remote-access-enumeration
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: remote-access-enumeration
Source: https://github.com/blacklanternsecurity/red-run/tree/main/skills/network/remote-access-enumeration
Command: npx skills add https://github.com/blacklanternsecurity/red-run --skill remote-access-enumeration

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates the enumeration of common remote access services on target systems, identifying potential vulnerabilities and access vectors without performing brute-force attacks.

Core Features & Use Cases

  • Service Identification: Detects FTP, SSH, RDP, VNC, and WinRM services.
  • Vulnerability Checks: Identifies anonymous access, default credentials, version-specific vulnerabilities (e.g., BlueKeep), and authentication methods.
  • Use Case: After discovering open ports on a target network, this Skill can quickly scan for and report on exposed remote access services, flagging potential weaknesses like anonymous FTP access or unpatched RDP vulnerabilities.

Quick Start

Use the remote-access-enumeration skill to enumerate remote access services on the target IP address 192.168.1.10.

Frequently Asked Questions about remote-access-enumeration

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate remote access services like FTP, SSH, and RDP?

Enumerate remote access services by scanning target hosts to identify FTP, SSH, RDP, VNC, and WinRM. This process detects active services, checks authentication methods, and reports potential security weaknesses without performing brute-force attacks.

What security vulnerabilities can remote access enumeration detect?

Remote access enumeration identifies anonymous FTP access, default credentials, unpatched version-specific vulnerabilities like BlueKeep on RDP, and active authentication methods. It flags exposed services and configuration weaknesses for security assessment.

Can I scan for anonymous FTP access and default credentials on a target network?

Yes, you can scan target hosts to identify anonymous FTP access and test for default credentials. The enumeration checks remote access protocols like FTP, SSH, and WinRM, reporting any weak authentication configurations found.

What tools are used for remote access service scanning and analysis?

Remote access service scanning utilizes nmap scripts and command-line tools for comprehensive service analysis. These tools detect active protocols, identify version vulnerabilities, and generate detailed security assessment reports.

Does remote access enumeration perform brute-force attacks on discovered services?

No, remote access enumeration does not perform brute-force attacks. It focuses on identifying services, checking for anonymous access and default credentials, and detecting version vulnerabilities to assess security posture passively.

When should I run remote access enumeration during a network security assessment?

Run remote access enumeration after discovering open ports on a target network. Use it to quickly scan and report on exposed services like SSH, RDP, and VNC, flagging weaknesses such as unpatched vulnerabilities or anonymous access.