Feature Request: Support for host enum on domain, null scanning, and returning SMB version in responses like CME

Looking to see if in the future we can have support for NULL Sessions on shares (unless it does and all my auth failures are just because null sessions aren't allowed), enumerating hosts in the domain, and returning the SMB version(s) in use. This would be super helpful to identify where SMBv1 is still in use when we are stuck without SOCKS or the ability to run CME. 