135 RPCCLIENT enum (SMB/Samba)

Part of the Samba (UNIX implementation of the SMB protocol) suite ; tool for executing client side MS-RPC functions, allows for basic enumeration in AD envs

Key commands

The "-U" option, using the "" parameter, coupled with the "-N" option allow us if possible to connect using a 'null' session on the remote computer, allowing for further enumeration commands in Active Directory environnements, such as the ones below.

enumdomusers

enumdomgroups

queryuser

querygroup

querydispinfo