🖊️ Author: Nairuz Abulhul
🌐 Blog: R3dbuck3t
We can use the rpcclient tool with a null session to enumerate a workstation or Domain Controller.
RPC Null Session
Command 1:
**rpcclient -U "" 192.168.1.101**
Command 2
Try running the commands with -N , Sometime, running the first command without -N returns errors.
**rpcclient -U "" -N 192.168.1.101**
Command 3
**rpcclient -U'%' 10.10.110.17**
**impacket-rpcdump 192.168.189.1**