CmdID

CmdID / Commands

rpcclient

MS-RPC client tool (part of the samba suite). tldr-pages

On Linux

Opens CmdID with your command. It is read in your browser and sent nowhere.

Linux

from tldr-pages, CC BY 4.0

Connect to a remote host

rpcclient --user domain\username%password ip_addressIdentify

Connect to a remote host on a domain without a password

rpcclient --user username --workgroup domain --no-pass ip_addressIdentify

Connect to a remote host, passing the password hash

rpcclient --user domain\username --pw-nt-hash ip_addressIdentify

Execute shell commands on a remote host

rpcclient --user domain\username%password --command semicolon_separated_commands ip_addressIdentify

[Interactive] Display domain users

enumdomusers

[Interactive] Display privileges

enumprivs

[Interactive] Display information about a specific user

queryuser username

[Interactive] Create a new user in the domain

createdomuser username