MSRPC 135
Nmap MSRPC Enumeration:
Enumerate MSRPC services:
sudo nmap 10.11.1.5 -p 135 --script=/usr/share/nmap/scripts/msrpc-enum.nse
Check for RPC over HTTP information:
sudo nmap 10.11.1.5 -p 135 --script=/usr/share/nmap/scripts/rpcap-info.nse
Other Enumeration Tools:
NMBlookup:
nmblookup -A 10.11.1.128:135
NBTSCAN:
nbtscan 10.11.1.128
Smbmap for SMB services:
smbmap -H 10.11.1.128 -P 135
Access SMB share:
smbclient //10.11.1.128/guest
RPCClient for NTLM authentication:
rpcclient -U "" -N 10.11.1.128
Last updated