r-services:
Enumeration
Guides for enumerating rsh and rlogin trust-based access
Warning
Legacy service family. In real networks it should not exist. In labs it often means trust-based access or weak segmentation. Prefer SSH for legitimate access.
Enumeration here is about confirming which daemon is actually exposed and whether the target enforces the classic privileged source-port behavior. If you get passwordless access, stop guessing and pivot hard into whatever trust model is configured.