Files
cheatsheet-tldr/tldr/linux/rpcclient
2025-12-23 00:21:40 +00:00

42 lines
1.1 KiB
Plaintext

---
syntax: markdown
tags: [tldr, linux]
source: https://github.com/tldr-pages/tldr.git
---
# rpcclient
> MS-RPC client tool (part of the samba suite).
> More information: <https://www.samba.org/samba/docs/current/man-html/rpcclient.1.html>.
- Connect to a remote host:
`rpcclient {{[-U|--user]}} {{domain}}\{{username}}%{{password}} {{ip_address}}`
- Connect to a remote host on a domain without a password:
`rpcclient {{[-U|--user]}} {{username}} {{[-W|--workgroup]}} {{domain}} {{[-N|--no-pass]}} {{ip_address}}`
- Connect to a remote host, passing the password hash:
`rpcclient {{[-U|--user]}} {{domain}}\{{username}} --pw-nt-hash {{ip_address}}`
- Execute shell commands on a remote host:
`rpcclient {{[-U|--user]}} {{domain}}\{{username}}%{{password}} {{[-c|--command]}} {{semicolon_separated_commands}} {{ip_address}}`
- Display domain users:
`rpcclient $> enumdomusers`
- Display privileges:
`rpcclient $> enumprivs`
- Display information about a specific user:
`rpcclient $> queryuser {{username|rid}}`
- Create a new user in the domain:
`rpcclient $> createdomuser {{username}}`