MSRPC 135

Nmap MSRPC Enumeration:

Enumerate MSRPC services:

sudo nmap 10.11.1.5 -p 135 --script=/usr/share/nmap/scripts/msrpc-enum.nse

Check for RPC over HTTP information:

sudo nmap 10.11.1.5 -p 135 --script=/usr/share/nmap/scripts/rpcap-info.nse

Other Enumeration Tools:

NMBlookup:

nmblookup -A 10.11.1.128:135

NBTSCAN:

nbtscan 10.11.1.128

Smbmap for SMB services:

smbmap -H 10.11.1.128 -P 135

Access SMB share:

smbclient //10.11.1.128/guest

RPCClient for NTLM authentication:

rpcclient -U "" -N 10.11.1.128