MSRPC:
Enumeration
RPC endpoint scanning, SAMR/LSA queries, SID brute forcing, coercion interf
Detecting Sensitive MSRPC Interfaces
Enumerates exposed MSRPC interfaces to identify sensitive endpoints like SAMR, LSARPC, and DRSUAPI that may allow credential theft or privilege escalation.
MSRPC SID Brute Forcing
Enumerate valid Windows SIDs via MSRPC using brute-force techniques to discover user accounts, groups, and domain objects through the LSA and SAMR interfaces.
MSRPC enumeration maps the RPC endpoints exposed on a Windows host. The endpoint mapper on port 135 reveals registered interfaces, their UUIDs, and the named pipes or TCP ports they bind to.
Interface discovery identifies services like SAMR, LSARPC, and DRSUAPI that enable further enumeration. Through these interfaces you can pull user and group lists, SID lookups, password policies, and share information without needing domain credentials in many configurations.