rpcclient

> MS-RPC client tool (part of the samba suite).

Connect to a remote host:

rpcclient --user {domain}\{username}%{password} {ip}

Connect to a remote host on a domain without a password:

rpcclient --user {username} --workgroup {domain} --no-pass {ip}

Connect to a remote host, passing the password hash:

rpcclient --user {domain}\{username} --pw-nt-hash {ip}

Execute shell commands on a remote host:

rpcclient --user {domain}\{username}%{password} --command {semicolon_separated_commands} {ip}

Display domain users:

rpcclient $> enumdomusers

Display privileges:

rpcclient $> enumprivs

Display information about a specific user:

rpcclient $> queryuser {username|rid}

Create a new user in the domain:

rpcclient $> createdomuser {username}

> This work is licensed under the Creative Commons Attribution 4.0 International License (CC-BY).

-- Response ended

-- Page fetched on Mon May 20 22:50:32 2024