rpcclient - RPC Enumeration

Anonymous (null) login

rpcclient -U "" -N $target

Authenticated login

rpcclient -U "twilliams" 10.10.24.203

RPC dump via null session

impacket-rpcdump vulnnet.local/"":""@10.10.36.200

Common commands inside the shell

help
enumdomusers
querydispinfo