Skip to content
HackIndex.io

MSRPC:

Enumeration

RPC endpoint scanning, SAMR/LSA queries, SID brute forcing, coercion interf

4 guides • Created Dec 28, 2025 • Updated Mar 29, 2026
4 guides

Detecting Sensitive MSRPC Interfaces

Enumerates exposed MSRPC interfaces to identify sensitive endpoints like SAMR, LSARPC, and DRSUAPI that may allow credential theft or privilege escalation.

Jan 4, 2026 • 3 min read
MSRPC SID Brute Forcing

MSRPC SID Brute Forcing

Enumerate valid Windows SIDs via MSRPC using brute-force techniques to discover user accounts, groups, and domain objects through the LSA and SAMR interfaces.

Jan 4, 2026 • 3 min read

MSRPC enumeration maps the RPC endpoints exposed on a Windows host. The endpoint mapper on port 135 reveals registered interfaces, their UUIDs, and the named pipes or TCP ports they bind to.

Interface discovery identifies services like SAMR, LSARPC, and DRSUAPI that enable further enumeration. Through these interfaces you can pull user and group lists, SID lookups, password policies, and share information without needing domain credentials in many configurations.