{"id":2103,"date":"2021-01-09T14:12:23","date_gmt":"2021-01-09T13:12:23","guid":{"rendered":"https:\/\/andreas-klingler.de\/infosec\/?p=2103"},"modified":"2021-01-18T20:43:52","modified_gmt":"2021-01-18T19:43:52","slug":"135-rpc","status":"publish","type":"post","link":"https:\/\/infosec.andreas-klingler.de\/?p=2103","title":{"rendered":"135 <span class=\"caps\">RPC<\/span>"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Enumeration<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Mandatory<\/h3>\n\n\n\n<ol class=\"wp-block-list\"><li>Get a list of reg\u00adis\u00adtered pro\u00adgrams via rpcbind\/v2 (pre\u00advi\u00adous portmap\u00adper!):<br><code>rpcinfo -p $target<\/code><\/li><li>Get a list of reg\u00adis\u00adtered pro\u00adgrams via rpcbind\/3:<br><code>rpcinfo -s $target<\/code><\/li><li>If suc\u00adcess\u00adful:<ol><li>Con\u00adnect with the <span class=\"caps\">RPC<\/span> con\u00adsole:<br><code>rpcclient -U \"\" $target<\/code><\/li><li><a href=\"https:\/\/andreas-klingler.de\/infosec\/?p=384\" data-type=\"post\" data-id=\"384\">Enu\u00admer\u00adate with the queries on the <span class=\"caps\">RPC<\/span> pro\u00adto\u00adcol&nbsp;post.<\/a><\/li><\/ol><\/li><\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Optional<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li>Try to brute-force accounts (no lock&nbsp;here!)<\/li><li>Try oth\u00ader enu\u00admer\u00ada\u00adtion tools <a href=\"https:\/\/andreas-klingler.de\/infosec\/?p=384\" data-type=\"post\" data-id=\"384\">from the <span class=\"caps\">RPC<\/span> pro\u00adto\u00adcol&nbsp;post.<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Enu\u00admer\u00ada\u00adtion Manda\u00adto\u00adry Get a list of reg\u00adis\u00adtered pro\u00adgrams via rpcbind\/v2 (pre\u00advi\u00adous portmap\u00adper!):rpcinfo \u2011p $tar\u00adget Get a list of reg\u00adis\u00adtered pro\u00adgrams via rpcbind\/3:rpcinfo \u2011s $tar\u00adget If suc\u00adcess\u00adful: Con\u00adnect with the <span class=\"caps\">RPC<\/span> con\u00adsole:rpcclient \u2011U \u201c\u201d $tar\u00adget Enu\u00admer\u00adate with the queries on the <span class=\"caps\">RPC<\/span> pro\u00adto\u00adcol&nbsp;post. Option\u00adal Try to brute-force accounts (no lock&nbsp;here!) Try oth\u00ader enu\u00admer\u00ada\u00adtion tools from&nbsp;the&nbsp;[\u2026]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"wp_typography_post_enhancements_disabled":false,"footnotes":""},"categories":[36],"tags":[37,104],"class_list":["post-2103","post","type-post","status-publish","format-standard","hentry","category-port","tag-checklist","tag-rpc"],"_links":{"self":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2103","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2103"}],"version-history":[{"count":3,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2103\/revisions"}],"predecessor-version":[{"id":2384,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2103\/revisions\/2384"}],"wp:attachment":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2103"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2103"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2103"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}