Patrick-DE / RTT-Docs

Public repository for the techniques and tools shown on rtt.secdu.de
GNU Affero General Public License v3.0
1 stars 0 forks source link

New tool: rpcclient #79

Closed Patrick-DE closed 1 year ago

Patrick-DE commented 1 year ago
{
  "name": "rpcclient",
  "phases": [
    "02. Reconnaissance"
  ],
  "category": "",
  "stealthy": false,
  "platforms": [
    "Linux"
  ],
  "source": "https://www.mankier.com/1/rpcclient",
  "description": "tool for executing client side MS-RPC functions",
  "undetected": [],
  "detected": [],
  "content": "\n## [[User enum]]\nEnumerate users present on a system\n'''\nproxychains rpcclient 10.0.1.10 -U testuser -P pw\nenumdomusers\n'''\n\nEnumerate the user\n'queryuser testuser'\n\n\nEnumerate the current users privs\n'enumprivs'\n\n\n\n",
  "commands": [
    {
      "id": "4452fd82-16b0-492c-aef1-5214ec954d8d",
      "name": "Get users on remote system",
      "description": "",
      "tag": "",
      "results": [
        "COMPUTER:USERS"
      ],
      "cmd": "rpcclient 10.0.1.10 -U testuser -P pw enumdomusers",
      "requirements": {
        "tag": "SERVICE:RPC"
      }
    },
    {
      "id": "dd980c91-8f5e-4f1a-a737-96419f85fe93",
      "name": "Get user X details on remote system",
      "description": "",
      "tag": "",
      "results": [
        "COMPUTER:USERS"
      ],
      "cmd": "rpcclient 10.0.1.10 -U testuser -P pw queryuser testuser",
      "requirements": {
        "tag": "SERVICE:RPC"
      }
    },
    {
      "id": "1341f02b-b373-4970-9b0c-cfffe538cb7a",
      "name": "Get current user privs",
      "description": "Enumerate the current users privs",
      "tag": "",
      "results": [
        "PRIVS"
      ],
      "cmd": "rpcclient 10.0.1.10 -U testuser -P pw enumprivs",
      "requirements": {
        "tag": "SERVICE:RPC"
      }
    }
  ]
}