nerdexam
GIAC

GCIH · Question #772

Which of the following can the rpcclient application do?

The correct answer is B. Interact with Windows hosts using SMB. rpcclient is a Samba-suite tool that communicates with Windows and Samba hosts over SMB/MSRPC to perform administrative and enumeration tasks.

Reconnaissance, Scanning, and Enumeration

Question

Which of the following can the rpcclient application do?

Options

  • AConnect with Windows hosts using RDP
  • BInteract with Windows hosts using SMB
  • CCollect password hashes from a Windows server
  • DEnumerate web pages on an IIS server

How the community answered

(67 responses)
  • A
    7% (5)
  • B
    88% (59)
  • C
    1% (1)
  • D
    3% (2)

Why each option

rpcclient is a Samba-suite tool that communicates with Windows and Samba hosts over SMB/MSRPC to perform administrative and enumeration tasks.

AConnect with Windows hosts using RDP

RDP (Remote Desktop Protocol) uses TCP 3389 and is handled by clients like xfreerdp or rdesktop, not rpcclient.

BInteract with Windows hosts using SMBCorrect

rpcclient uses the SMB protocol and MS-RPC (Microsoft Remote Procedure Call) over SMB to interact with Windows and Samba hosts, allowing operations such as user enumeration, share listing, and policy queries. It is part of the Samba suite and relies on SMB transport (TCP 139/445) to establish its connection. This makes it a standard tool for SMB-based reconnaissance and administration.

CCollect password hashes from a Windows server

Collecting password hashes from a Windows server requires tools like secretsdump or pwdump that access the SAM/NTDS; rpcclient does not extract password hashes.

DEnumerate web pages on an IIS server

Enumerating IIS web pages is an HTTP/HTTPS activity performed by web scanners; rpcclient has no web enumeration capability.

Concept tested: rpcclient SMB-based Windows host interaction

Source: https://www.samba.org/samba/docs/current/man-html/rpcclient.1.html

Topics

#rpcclient#SMB#Windows interoperability#RPC

Community Discussion

No community discussion yet for this question.

Full GCIH Practice