Notes

• Port 3389 is the default port for Remote Desktop Services and is an excellent indication that the target is a Windows machine.
• nmap can run scripts during its scan that identify specific vulnerabilities (such as the script found here) with nmap --script <script name> -p<port> <host>

Shell Types

nmap Script Categories