RPCClient

Description

RPCClient is a utility initially developed to test MS-RPC functionality in Samba itself. It has undergone several stages of development and stability. Many system administrators have now written scripts around it to manage Windows NT clients from their UNIX workstation.

Authentication

Null AuthenticationWith An Account

rpcclient -U '' -N 10.10.10.10

rpcclient -U 'qu35t' 10.10.10.10

Usage

User EnumerationUser InformationGroup EnumerationGroup InformationShow Members of a Group

enumdomusers

queryuser 0x450

enumdomgroups

querygroup 0x450

querygroupmem 0x450

Printer EnumerationDump AD InformationGet a user's SIDBruteforce RID/SIDChange a user's password

enumprinters

querydisplayinfo

lookupnames qu35t 

lookupsids S-1-5-21-4254423774-1266059056-3197185112-1008

setuserinfo2 'qu35t' 23 'NewPassw0rd!'

References

• Ippsec - Fuse
• Ippsec - Monteverde
• Ippsec - Resolute
• Ippsec - Heist