rpcclient Command Examples

MS-RPC client tool (part of the samba suite). More information: https://www.samba.org/samba/docs/current/man-html/rpcclient.1.html.

rpcclient {{[-U|--user]}} {{domain}}\{{username}}%{{password}} {{ip}}

rpcclient {{[-U|--user]}} {{username}} {{[-W|--workgroup]}} {{domain}} {{[-N|--no-pass]}} {{ip}}

rpcclient {{[-U|--user]}} {{domain}}\{{username}} --pw-nt-hash {{ip}}

rpcclient {{[-U|--user]}} {{domain}}\{{username}}%{{password}} {{[-c|--command]}} {{semicolon_separated_commands}} {{ip}}

rpcclient $> enumdomusers

rpcclient $> enumprivs

rpcclient $> queryuser {{username|rid}}

rpcclient $> createdomuser {{username}}