UPDATE BOOKMARKS - PROJECT MOVED TO A DEDICATED PROJECT SITE. THIS SITE WILL NOT BE UPDATED ANYMORE, BUT WILL BE KEPT FOR HISTORICAL REASONS.
New site: https://github.com/LOLBAS-Project/LOLBAS Web portal: https://lolbas-project.github.io/
- Functions: Credentials
rpcping -s 127.0.0.1 -t ncacn_np
rpcping -s 192.168.1.10 -t ncacn_np
rpcping -s 127.0.0.1 -e 1234 -a privacy -u NTLM
Acknowledgements:
- Casey Smith - @subtee
- Vincent Yiu - @vysecurity
Code sample: *
Resources:
- https://twitter.com/subtee/status/872797890539913216
- https://github.com/vysec/RedTips
- https://twitter.com/vysecurity/status/974806438316072960
- https://twitter.com/vysecurity/status/873181705024266241
Full path:
c:\windows\system32\rpcping.exe
c:\windows\sysWOW64\rpcping.exe
Notes:
Detection: