reconnoitre

Reconnoitre:

Nmap NSE Scanner built for the OSCP. Creates several files: most importantly gives NSE script suggestions.

reconnoitre -h

reconnoitre -t 10.10.10.75 -o . --hostnames --services --no-udp

GitHub - codingo/Reconnoitre: A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.GitHub

Tool Link

Now hop over to Services to start exploiting broken configs if NSE auto-pwns are not working.