111/tcp open rpcbind – RPC enumeration

nmap

nmap is great

if you will find by nmap 111/tcp open rpcbind

nmap -n -sV -Pn -p- 192.168.1.13
...
111/tcp   open  rpcbind    2-4 (RPC #100000)
...

111 give some possibility to enumeration RPC

rpcinfo -p 192.168.1.13
   program vers proto   port  service
...
    100003    2   tcp   2049  nfs
    100003    3   tcp   2049  nfs
    100003    4   tcp   2049  nfs
...
    100003    2   udp   2049  nfs
    100003    3   udp   2049  nfs
    100003    4   udp   2049  nfs
...
showmount -e 192.168.1.13
/home/user

mount folder

mount 192.168.1.13:/home/user /mnt/user/