Skip to content
HackIndex logo

HackIndex

MSRPC
Service

MSRPC

Windows remote procedure calls

:135 5 guides 2 phases
1 min read Updated: Jul 13, 2026

What is MSRPC?

MSRPC is Microsoft’s Remote Procedure Call framework used for Windows service communication.

Common security issues

  • Enumeration of services and users.

  • NTLM relay vulnerabilities.

  • Privilege escalation over RPC endpoints.

  • Lateral movement options.

Default ports

  • 135

Enumeration

RPC endpoint scanning, SAMR/LSA queries, SID brute forcing, coercion interf

4

Detecting Sensitive MSRPC Interfaces

Enumerates exposed MSRPC interfaces to identify sensitive endpoints like SAMR, LSARPC, and DRSUAPI that may allow credential theft or privilege escalation.

Jan 4, 2026 • 1 min read
MSRPC SID Brute Forcing

MSRPC SID Brute Forcing

Enumerate valid Windows SIDs via MSRPC using brute-force techniques to discover user accounts, groups, and domain objects through the LSA and SAMR interfaces.

Jan 4, 2026 • 1 min read

Exploitation

Execute commands via DCOM objects over MSRPC using impacket

1