Closed Patrick-DE closed 1 year ago
{ "name": "rpcclient", "phases": [ "02. Reconnaissance" ], "category": "", "stealthy": false, "platforms": [ "Linux" ], "source": "https://www.mankier.com/1/rpcclient", "description": "tool for executing client side MS-RPC functions", "undetected": [], "detected": [], "content": "\n## [[User enum]]\nEnumerate users present on a system\n'''\nproxychains rpcclient 10.0.1.10 -U testuser -P pw\nenumdomusers\n'''\n\nEnumerate the user\n'queryuser testuser'\n\n\nEnumerate the current users privs\n'enumprivs'\n\n\n\n", "commands": [ { "id": "4452fd82-16b0-492c-aef1-5214ec954d8d", "name": "Get users on remote system", "description": "", "tag": "", "results": [ "COMPUTER:USERS" ], "cmd": "rpcclient 10.0.1.10 -U testuser -P pw enumdomusers", "requirements": { "tag": "SERVICE:RPC" } }, { "id": "dd980c91-8f5e-4f1a-a737-96419f85fe93", "name": "Get user X details on remote system", "description": "", "tag": "", "results": [ "COMPUTER:USERS" ], "cmd": "rpcclient 10.0.1.10 -U testuser -P pw queryuser testuser", "requirements": { "tag": "SERVICE:RPC" } }, { "id": "1341f02b-b373-4970-9b0c-cfffe538cb7a", "name": "Get current user privs", "description": "Enumerate the current users privs", "tag": "", "results": [ "PRIVS" ], "cmd": "rpcclient 10.0.1.10 -U testuser -P pw enumprivs", "requirements": { "tag": "SERVICE:RPC" } } ] }