Tool

Commander

Copy-ready command templates for common penetration testing tools. Select a tool, fill in the parameters, copy, paste, profit.

rpcclient

↗ docs

SMB/RPC client for enumerating Windows hosts — users, groups, shares, and more

smbrpcenumerationwindowsactive-directory

Parameters

Null Session

Connect with a null (anonymous) session.

rpcclient -U '' -N

Authenticated Session

Connect with valid credentials.

rpcclient -U '%'

Enumerate Domain Users

List all domain users via null session.

rpcclient -U '' -N -c 'enumdomusers'

Enumerate Shares

List shares via null session.

rpcclient -U '' -N -c 'netshareenumall'

Lookup User SID

Look up a username and retrieve the SID.

rpcclient -U '' -N -c 'lookupnames '