GCIH · Question #772
Which of the following can the rpcclient application do?
The correct answer is B. Interact with Windows hosts using SMB. rpcclient is a Samba-suite tool that communicates with Windows and Samba hosts over SMB/MSRPC to perform administrative and enumeration tasks.
Question
Which of the following can the rpcclient application do?
Options
- AConnect with Windows hosts using RDP
- BInteract with Windows hosts using SMB
- CCollect password hashes from a Windows server
- DEnumerate web pages on an IIS server
How the community answered
(67 responses)- A7% (5)
- B88% (59)
- C1% (1)
- D3% (2)
Why each option
rpcclient is a Samba-suite tool that communicates with Windows and Samba hosts over SMB/MSRPC to perform administrative and enumeration tasks.
RDP (Remote Desktop Protocol) uses TCP 3389 and is handled by clients like xfreerdp or rdesktop, not rpcclient.
rpcclient uses the SMB protocol and MS-RPC (Microsoft Remote Procedure Call) over SMB to interact with Windows and Samba hosts, allowing operations such as user enumeration, share listing, and policy queries. It is part of the Samba suite and relies on SMB transport (TCP 139/445) to establish its connection. This makes it a standard tool for SMB-based reconnaissance and administration.
Collecting password hashes from a Windows server requires tools like secretsdump or pwdump that access the SAM/NTDS; rpcclient does not extract password hashes.
Enumerating IIS web pages is an HTTP/HTTPS activity performed by web scanners; rpcclient has no web enumeration capability.
Concept tested: rpcclient SMB-based Windows host interaction
Source: https://www.samba.org/samba/docs/current/man-html/rpcclient.1.html
Topics
Community Discussion
No community discussion yet for this question.