A CLI tool from the Samba Server suite used to interact with Microsoft Remote Procedure Call (MSRPC) interfaces over the SMB Protocol.
Its primary use is enumeration and remote management of Windows or Samba-based systems.
Commands
rpcclient [OPTIONS] <IP>Options
-U <username>[%password]: Authenticate with username and perhaps a password. Use""as <username> to login as an anonymous user
Interactive Commands
These are executed after a successful connection is established:
srvinfo: server information.enumdomains: enumerate all domains deployed in the network.querydominfo: provides domain, server, and user information of deployed domains.netshareenum: enumerates all available shares.netsharegetinfo <share>: provides information about a specific share.enumdomusers: enumerates all domain users.queryuser <RID>: provides information about a specific user.lookupnames: resolve a username to its SID.