TCP: RPC - 135 / 593

Connection

rpcclient -U "" -N <Target IP Address>

rpcclient -U "" <Target IP Address>

rpcclient -U "guest" <Target IP Address>

NOTE: The following can only be executed if you are in RPC console

Enumerate domain users

enumdomusers

NOTE: The above command returns RID

Get group info

enumdomgroups
querygroup <RID>

Dump detailed user info

queryuser <RID>

Get domain policy

getdompwinfo

Last updated 6 months ago