LOLBAS/OSBinaries/Rpcping.md

Rpcping.exe

• Functions: Credentials

rpcping -s 127.0.0.1 -t ncacn_np
     
rpcping -s 192.168.1.10 -t ncacn_np   

rpcping  -s 127.0.0.1 -e 1234 -a privacy -u NTLM      

Acknowledgements:

• Casey Smith - @subtee
• Vincent Yiu - @vysecurity

Code sample: *

Resources:

• https://twitter.com/subtee/status/872797890539913216
• https://github.com/vysec/RedTips
• https://twitter.com/vysecurity/status/974806438316072960
• https://twitter.com/vysecurity/status/873181705024266241

Full path:

c:\windows\system32\rpcping.exe
c:\windows\sysWOW64\rpcping.exe

Notes:

Detection: