rpcmap.py
Look up listening MSRPC interfaces using a string binding (e.g., ncacn_ip_tcp:host[port]). tldr-pages
On several platforms
Several platforms
Look up listening MSRPC interfaces using a string binding (e.g., ncacn_ip_tcp:host[port]). Part of the Impacket suite.
Connect to an MSRPC interface using a string binding (e.g., ncacn_ip_tcp:host[port])
rpcmap.py stringbindingIdentifyBruteforce UUIDs even if the MGMT interface is available
rpcmap.py -brute-uuids stringbindingIdentifyBruteforce operation numbers (opnums) for discovered UUIDs
rpcmap.py -brute-opnums stringbindingIdentifyBruteforce major versions of found UUIDs
rpcmap.py -brute-versions stringbindingIdentifySpecify a target IP address manually
rpcmap.py -target-ip ip_address stringbindingIdentifyAuthenticate to the RPC interface with username and password
rpcmap.py -auth-rpc domain/username:password stringbindingIdentifyAuthenticate using NTLM hashes for RPC
rpcmap.py -hashes-rpc LMHASH:NTHASH stringbindingIdentifyEnable debug output for verbose information
rpcmap.py -debug stringbindingIdentify