# Exploitation

> Execute commands via DCOM objects over MSRPC using impacket

- **URL:** https://hackindex.io/services/msrpc/exploitation
- **Service:** [MSRPC](https://hackindex.io/services/msrpc.md)
- **Tags:** initial-access, execution
- **Published:** 2026-03-11
- **Updated:** 2026-03-29

MSRPC exploitation leverages exposed RPC interfaces for remote code execution and authentication coercion. Named pipe abuse through interfaces like SAMR and LSARPC can escalate from anonymous access to authenticated operations.

PrintNightmare targets the Print Spooler service for remote code execution via RPC. PetitPotam coerces NTLM authentication through EFSRPC, enabling relay attacks against AD CS or other services. These attacks chain well with NTLM relay for domain-level compromise.

## Guides

- [DCOM Remote Execution via MSRPC – dcomexec](https://hackindex.io/services/msrpc/exploitation/dcom-remote-execution.md)