InfoSec LAB

Jeeves_MSRPC

Created: 8 min read

MSRPC

Nmap discovered a MSRPC server on the target port 135 The running service is Microsoft Windows RPC

┌──(kali㉿kali)-[~/archive/htb/labs/jeeves]
└─$ rpcclient $IP -N -U ''
Cannot connect to server.  Error was NT_STATUS_ACCESS_DENIED

The target MSRPC server does not allow anonymous access

RPC Endpoints

┌──(kali㉿kali)-[~/archive/htb/labs/jeeves]
└─$ impacket-rpcdump $IP                                                                                                          130 ⨯
Impacket v0.11.0 - Copyright 2023 Fortra
 
[*] Retrieving endpoint list from 10.10.10.63
Protocol: [MS-RSP]: Remote Shutdown Protocol 
Provider: wininit.exe 
UUID    : D95AFE70-A6D5-4259-822E-2C84DA1DDB0D v1.0 
Bindings: 
          ncacn_ip_tcp:10.10.10.63[49664]
          ncalrpc:[WindowsShutdown]
          ncacn_np:\\JEEVES[\PIPE\InitShutdown]
          ncalrpc:[WMsgKRpc09C0E0]
 
Protocol: N/A 
Provider: winlogon.exe 
UUID    : 76F226C3-EC14-4325-8A99-6A46348418AF v1.0 
Bindings: 
          ncalrpc:[WindowsShutdown]
          ncacn_np:\\JEEVES[\PIPE\InitShutdown]
          ncalrpc:[WMsgKRpc09C0E0]
          ncalrpc:[WMsgKRpc09C391]
 
Protocol: N/A 
Provider: N/A 
UUID    : 9B008953-F195-4BF9-BDE0-4471971E58ED v1.0 
Bindings: 
          ncalrpc:[LRPC-da5453c5451dd47081]
          ncalrpc:[dabrpc]
          ncalrpc:[csebpub]
          ncalrpc:[LRPC-455e122ee0abdaebfa]
          ncalrpc:[LRPC-4453ed481b35dd66ea]
          ncalrpc:[LRPC-f68b093914dd37bb9f]
          ncacn_np:\\JEEVES[\pipe\LSM_API_service]
          ncalrpc:[LSMApi]
          ncalrpc:[LRPC-bdec65ac349b597768]
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : D09BDEB5-6171-4A34-BFE2-06FA82652568 v1.0 
Bindings: 
          ncalrpc:[csebpub]
          ncalrpc:[LRPC-455e122ee0abdaebfa]
          ncalrpc:[LRPC-4453ed481b35dd66ea]
          ncalrpc:[LRPC-f68b093914dd37bb9f]
          ncacn_np:\\JEEVES[\pipe\LSM_API_service]
          ncalrpc:[LSMApi]
          ncalrpc:[LRPC-bdec65ac349b597768]
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
          ncalrpc:[LRPC-4453ed481b35dd66ea]
          ncalrpc:[LRPC-f68b093914dd37bb9f]
          ncacn_np:\\JEEVES[\pipe\LSM_API_service]
          ncalrpc:[LSMApi]
          ncalrpc:[LRPC-bdec65ac349b597768]
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
          ncalrpc:[LRPC-fd16ae700466f7dce0]
          ncalrpc:[LRPC-956e12e0b89a15710c]
          ncacn_np:\\JEEVES[\PIPE\srvsvc]
          ncalrpc:[LRPC-65f67fa6a35a6296f7]
          ncalrpc:[DeviceSetupManager]
          ncacn_ip_tcp:10.10.10.63[49666]
          ncalrpc:[LRPC-1de7e6b2825dbc3a12]
          ncalrpc:[ubpmtaskhostchannel]
          ncacn_np:\\JEEVES[\PIPE\atsvc]
          ncalrpc:[senssvc]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
 
Protocol: N/A 
Provider: N/A 
UUID    : 697DCDA9-3BA9-4EB2-9247-E11F1901B0D2 v1.0 
Bindings: 
          ncalrpc:[LRPC-455e122ee0abdaebfa]
          ncalrpc:[LRPC-4453ed481b35dd66ea]
          ncalrpc:[LRPC-f68b093914dd37bb9f]
          ncacn_np:\\JEEVES[\pipe\LSM_API_service]
          ncalrpc:[LSMApi]
          ncalrpc:[LRPC-bdec65ac349b597768]
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : 857FB1BE-084F-4FB5-B59C-4B2C4BE5F0CF v1.0 
Bindings: 
          ncalrpc:[LRPC-f68b093914dd37bb9f]
          ncacn_np:\\JEEVES[\pipe\LSM_API_service]
          ncalrpc:[LSMApi]
          ncalrpc:[LRPC-bdec65ac349b597768]
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : B8CADBAF-E84B-46B9-84F2-6F71C03F9E55 v1.0 
Bindings: 
          ncalrpc:[LRPC-f68b093914dd37bb9f]
          ncacn_np:\\JEEVES[\pipe\LSM_API_service]
          ncalrpc:[LSMApi]
          ncalrpc:[LRPC-bdec65ac349b597768]
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : 20C40295-8DBA-48E6-AEBF-3E78EF3BB144 v1.0 
Bindings: 
          ncalrpc:[LRPC-f68b093914dd37bb9f]
          ncacn_np:\\JEEVES[\pipe\LSM_API_service]
          ncalrpc:[LSMApi]
          ncalrpc:[LRPC-bdec65ac349b597768]
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : 2513BCBE-6CD4-4348-855E-7EFB3C336DD3 v1.0 
Bindings: 
          ncalrpc:[LRPC-f68b093914dd37bb9f]
          ncacn_np:\\JEEVES[\pipe\LSM_API_service]
          ncalrpc:[LSMApi]
          ncalrpc:[LRPC-bdec65ac349b597768]
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : 88ABCBC3-34EA-76AE-8215-767520655A23 v0.0 
Bindings: 
          ncalrpc:[LRPC-f68b093914dd37bb9f]
          ncacn_np:\\JEEVES[\pipe\LSM_API_service]
          ncalrpc:[LSMApi]
          ncalrpc:[LRPC-bdec65ac349b597768]
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : 76C217BC-C8B4-4201-A745-373AD9032B1A v1.0 
Bindings: 
          ncalrpc:[LRPC-f68b093914dd37bb9f]
          ncacn_np:\\JEEVES[\pipe\LSM_API_service]
          ncalrpc:[LSMApi]
          ncalrpc:[LRPC-bdec65ac349b597768]
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : 55E6B932-1979-45D6-90C5-7F6270724112 v1.0 
Bindings: 
          ncalrpc:[LRPC-f68b093914dd37bb9f]
          ncacn_np:\\JEEVES[\pipe\LSM_API_service]
          ncalrpc:[LSMApi]
          ncalrpc:[LRPC-bdec65ac349b597768]
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : 1832BCF6-CAB8-41D4-85D2-C9410764F75A v1.0 
Bindings: 
          ncacn_np:\\JEEVES[\pipe\LSM_API_service]
          ncalrpc:[LSMApi]
          ncalrpc:[LRPC-bdec65ac349b597768]
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : AA371ED8-84FD-47C6-AD26-1F601A365A73 v0.0 
Bindings: 
          ncacn_np:\\JEEVES[\pipe\LSM_API_service]
          ncalrpc:[LSMApi]
          ncalrpc:[LRPC-bdec65ac349b597768]
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : C521FACF-09A9-42C5-B155-72388595CBF0 v0.0 
Bindings: 
          ncacn_np:\\JEEVES[\pipe\LSM_API_service]
          ncalrpc:[LSMApi]
          ncalrpc:[LRPC-bdec65ac349b597768]
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : 2C7FD9CE-E706-4B40-B412-953107EF9BB0 v0.0 
Bindings: 
          ncacn_np:\\JEEVES[\pipe\LSM_API_service]
          ncalrpc:[LSMApi]
          ncalrpc:[LRPC-bdec65ac349b597768]
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: sysntfy.dll 
UUID    : C9AC6DB5-82B7-4E55-AE8A-E464ED7B4277 v1.0 Impl friendly name
Bindings: 
          ncalrpc:[LRPC-bdec65ac349b597768]
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
          ncalrpc:[senssvc]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
 
Protocol: N/A 
Provider: N/A 
UUID    : 0D3E2735-CEA0-4ECC-A9E2-41A2D81AED4E v1.0 
Bindings: 
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : C605F9FB-F0A3-4E2A-A073-73560F8D9E3E v1.0 
Bindings: 
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : 1B37CA91-76B1-4F5E-A3C7-2ABFC61F2BB0 v1.0 
Bindings: 
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : 8BFC3BE1-6DEF-4E2D-AF74-7C47CD0ADE4A v1.0 
Bindings: 
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : 2D98A740-581D-41B9-AA0D-A88B9D5CE938 v1.0 
Bindings: 
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : 5824833B-3C1A-4AD2-BDFD-C31D19E23ED2 v1.0 
Bindings: 
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : BDAA0970-413B-4A3E-9E5D-F6DC9D7E0760 v1.0 
Bindings: 
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : 3B338D89-6CFA-44B8-847E-531531BC9992 v1.0 
Bindings: 
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : 8782D3B9-EBBD-4644-A3D8-E8725381919B v1.0 
Bindings: 
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : 085B0334-E454-4D91-9B8C-4134F9E793F3 v1.0 
Bindings: 
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: N/A 
UUID    : 4BEC6BB8-B5C2-4B6F-B2C1-5DA5CF92D0D9 v1.0 
Bindings: 
          ncalrpc:[actkernel]
          ncalrpc:[umpo]
 
Protocol: N/A 
Provider: MPSSVC.dll 
UUID    : 2FB92682-6599-42DC-AE13-BD2CA89BD11C v1.0 Fw APIs
Bindings: 
          ncalrpc:[LRPC-135826deac9ba1136f]
          ncalrpc:[LRPC-dbc52c7aa2bf7b631b]
          ncalrpc:[LRPC-5bcf31a0371bdfa1b0]
 
Protocol: N/A 
Provider: N/A 
UUID    : F47433C3-3E9D-4157-AAD4-83AA1F5C2D4C v1.0 Fw APIs
Bindings: 
          ncalrpc:[LRPC-135826deac9ba1136f]
          ncalrpc:[LRPC-dbc52c7aa2bf7b631b]
          ncalrpc:[LRPC-5bcf31a0371bdfa1b0]
 
Protocol: N/A 
Provider: MPSSVC.dll 
UUID    : 7F9D11BF-7FB9-436B-A812-B2D50C5D4C03 v1.0 Fw APIs
Bindings: 
          ncalrpc:[LRPC-135826deac9ba1136f]
          ncalrpc:[LRPC-dbc52c7aa2bf7b631b]
          ncalrpc:[LRPC-5bcf31a0371bdfa1b0]
 
Protocol: N/A 
Provider: BFE.DLL 
UUID    : DD490425-5325-4565-B774-7E27D6C09C24 v1.0 Base Firewall Engine API
Bindings: 
          ncalrpc:[LRPC-dbc52c7aa2bf7b631b]
          ncalrpc:[LRPC-5bcf31a0371bdfa1b0]
 
Protocol: N/A 
Provider: N/A 
UUID    : DF4DF73A-C52D-4E3A-8003-8437FDF8302A v0.0 WM_WindowManagerRPC\Server
Bindings: 
          ncalrpc:[LRPC-5bcf31a0371bdfa1b0]
 
Protocol: N/A 
Provider: ssdpsrv.dll 
UUID    : 4B112204-0E19-11D3-B42B-0000F81FEB9F v1.0 
Bindings: 
          ncalrpc:[LRPC-763909f24453187e88]
          ncalrpc:[LRPC-7abc40a2a97c58d500]
          ncalrpc:[LRPC-fd16ae700466f7dce0]
 
Protocol: N/A 
Provider: N/A 
UUID    : A500D4C6-0DD1-4543-BC0C-D5F93486EAF8 v1.0 
Bindings: 
          ncalrpc:[LRPC-7abc40a2a97c58d500]
          ncalrpc:[LRPC-fd16ae700466f7dce0]
 
Protocol: N/A 
Provider: wscsvc.dll 
UUID    : 06BBA54A-BE05-49F9-B0A0-30F790261023 v1.0 Security Center
Bindings: 
          ncalrpc:[OLE6CC3B78613D8978A3B1AF5264AF8]
          ncalrpc:[LRPC-3bd3f833807dd709ab]
          ncalrpc:[AudioSrvDiagnosticsRpc]
          ncalrpc:[PlaybackManagerRpc]
          ncalrpc:[Audiosrv]
          ncalrpc:[AudioClientRpc]
          ncalrpc:[LRPC-0fae2c4be7d4539c60]
          ncalrpc:[dhcpcsvc]
          ncalrpc:[dhcpcsvc6]
          ncacn_ip_tcp:10.10.10.63[49665]
          ncacn_np:\\JEEVES[\pipe\eventlog]
          ncalrpc:[eventlog]
 
Protocol: N/A 
Provider: N/A 
UUID    : 7AEB6705-3AE6-471A-882D-F39C109EDC12 v1.0 
Bindings: 
          ncalrpc:[LRPC-3bd3f833807dd709ab]
          ncalrpc:[AudioSrvDiagnosticsRpc]
          ncalrpc:[PlaybackManagerRpc]
          ncalrpc:[Audiosrv]
          ncalrpc:[AudioClientRpc]
          ncalrpc:[LRPC-0fae2c4be7d4539c60]
          ncalrpc:[dhcpcsvc]
          ncalrpc:[dhcpcsvc6]
          ncacn_ip_tcp:10.10.10.63[49665]
          ncacn_np:\\JEEVES[\pipe\eventlog]
          ncalrpc:[eventlog]
 
Protocol: N/A 
Provider: N/A 
UUID    : E7F76134-9EF5-4949-A2D6-3368CC0988F3 v1.0 
Bindings: 
          ncalrpc:[LRPC-3bd3f833807dd709ab]
          ncalrpc:[AudioSrvDiagnosticsRpc]
          ncalrpc:[PlaybackManagerRpc]
          ncalrpc:[Audiosrv]
          ncalrpc:[AudioClientRpc]
          ncalrpc:[LRPC-0fae2c4be7d4539c60]
          ncalrpc:[dhcpcsvc]
          ncalrpc:[dhcpcsvc6]
          ncacn_ip_tcp:10.10.10.63[49665]
          ncacn_np:\\JEEVES[\pipe\eventlog]
          ncalrpc:[eventlog]
 
Protocol: N/A 
Provider: N/A 
UUID    : B3781086-6A54-489B-91C8-51D067172AB7 v1.0 
Bindings: 
          ncalrpc:[LRPC-3bd3f833807dd709ab]
          ncalrpc:[AudioSrvDiagnosticsRpc]
          ncalrpc:[PlaybackManagerRpc]
          ncalrpc:[Audiosrv]
          ncalrpc:[AudioClientRpc]
          ncalrpc:[LRPC-0fae2c4be7d4539c60]
          ncalrpc:[dhcpcsvc]
          ncalrpc:[dhcpcsvc6]
          ncacn_ip_tcp:10.10.10.63[49665]
          ncacn_np:\\JEEVES[\pipe\eventlog]
          ncalrpc:[eventlog]
 
Protocol: N/A 
Provider: N/A 
UUID    : B37F900A-EAE4-4304-A2AB-12BB668C0188 v1.0 
Bindings: 
          ncalrpc:[LRPC-3bd3f833807dd709ab]
          ncalrpc:[AudioSrvDiagnosticsRpc]
          ncalrpc:[PlaybackManagerRpc]
          ncalrpc:[Audiosrv]
          ncalrpc:[AudioClientRpc]
          ncalrpc:[LRPC-0fae2c4be7d4539c60]
          ncalrpc:[dhcpcsvc]
          ncalrpc:[dhcpcsvc6]
          ncacn_ip_tcp:10.10.10.63[49665]
          ncacn_np:\\JEEVES[\pipe\eventlog]
          ncalrpc:[eventlog]
 
Protocol: N/A 
Provider: N/A 
UUID    : ABFB6CA3-0C5E-4734-9285-0AEE72FE8D1C v1.0 
Bindings: 
          ncalrpc:[LRPC-3bd3f833807dd709ab]
          ncalrpc:[AudioSrvDiagnosticsRpc]
          ncalrpc:[PlaybackManagerRpc]
          ncalrpc:[Audiosrv]
          ncalrpc:[AudioClientRpc]
          ncalrpc:[LRPC-0fae2c4be7d4539c60]
          ncalrpc:[dhcpcsvc]
          ncalrpc:[dhcpcsvc6]
          ncacn_ip_tcp:10.10.10.63[49665]
          ncacn_np:\\JEEVES[\pipe\eventlog]
          ncalrpc:[eventlog]
 
Protocol: N/A 
Provider: nrpsrv.dll 
UUID    : 30ADC50C-5CBC-46CE-9A0E-91914789E23C v1.0 NRP server endpoint
Bindings: 
          ncalrpc:[LRPC-0fae2c4be7d4539c60]
          ncalrpc:[dhcpcsvc]
          ncalrpc:[dhcpcsvc6]
          ncacn_ip_tcp:10.10.10.63[49665]
          ncacn_np:\\JEEVES[\pipe\eventlog]
          ncalrpc:[eventlog]
 
Protocol: N/A 
Provider: dhcpcsvc.dll 
UUID    : 3C4728C5-F0AB-448B-BDA1-6CE01EB0A6D5 v1.0 DHCP Client LRPC Endpoint
Bindings: 
          ncalrpc:[dhcpcsvc]
          ncalrpc:[dhcpcsvc6]
          ncacn_ip_tcp:10.10.10.63[49665]
          ncacn_np:\\JEEVES[\pipe\eventlog]
          ncalrpc:[eventlog]
 
Protocol: N/A 
Provider: dhcpcsvc6.dll 
UUID    : 3C4728C5-F0AB-448B-BDA1-6CE01EB0A6D6 v1.0 DHCPv6 Client LRPC Endpoint
Bindings: 
          ncalrpc:[dhcpcsvc6]
          ncacn_ip_tcp:10.10.10.63[49665]
          ncacn_np:\\JEEVES[\pipe\eventlog]
          ncalrpc:[eventlog]
 
Protocol: [MS-EVEN6]: EventLog Remoting Protocol 
Provider: wevtsvc.dll 
UUID    : F6BEAFF7-1E19-4FBB-9F8F-B89E2018337C v1.0 Event log TCPIP
Bindings: 
          ncacn_ip_tcp:10.10.10.63[49665]
          ncacn_np:\\JEEVES[\pipe\eventlog]
          ncalrpc:[eventlog]
 
Protocol: N/A 
Provider: N/A 
UUID    : 3473DD4D-2E88-4006-9CBA-22570909DD10 v5.1 WinHttp Auto-Proxy Service
Bindings: 
          ncalrpc:[OLE9FBF7A489BE2E90345E4D6B7F06C]
          ncalrpc:[LRPC-0721ff4ea142022adc]
 
Protocol: N/A 
Provider: nsisvc.dll 
UUID    : 7EA70BCF-48AF-4F6A-8968-6A440754D5FA v1.0 NSI server endpoint
Bindings: 
          ncalrpc:[LRPC-0721ff4ea142022adc]
 
Protocol: N/A 
Provider: N/A 
UUID    : C49A5A70-8A7F-4E70-BA16-1E8F1F193EF1 v1.0 Adh APIs
Bindings: 
          ncacn_np:\\JEEVES[\PIPE\srvsvc]
          ncalrpc:[LRPC-65f67fa6a35a6296f7]
          ncalrpc:[DeviceSetupManager]
          ncacn_ip_tcp:10.10.10.63[49666]
          ncalrpc:[LRPC-1de7e6b2825dbc3a12]
          ncalrpc:[ubpmtaskhostchannel]
          ncacn_np:\\JEEVES[\PIPE\atsvc]
          ncalrpc:[senssvc]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
 
Protocol: N/A 
Provider: N/A 
UUID    : 1A0D010F-1C33-432C-B0F5-8CF4E8053099 v1.0 IdSegSrv service
Bindings: 
          ncalrpc:[LRPC-65f67fa6a35a6296f7]
          ncalrpc:[DeviceSetupManager]
          ncacn_ip_tcp:10.10.10.63[49666]
          ncalrpc:[LRPC-1de7e6b2825dbc3a12]
          ncalrpc:[ubpmtaskhostchannel]
          ncacn_np:\\JEEVES[\PIPE\atsvc]
          ncalrpc:[senssvc]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
 
Protocol: N/A 
Provider: N/A 
UUID    : C36BE077-E14B-4FE9-8ABC-E856EF4F048B v1.0 Proxy Manager client server endpoint
Bindings: 
          ncalrpc:[LRPC-65f67fa6a35a6296f7]
          ncalrpc:[DeviceSetupManager]
          ncacn_ip_tcp:10.10.10.63[49666]
          ncalrpc:[LRPC-1de7e6b2825dbc3a12]
          ncalrpc:[ubpmtaskhostchannel]
          ncacn_np:\\JEEVES[\PIPE\atsvc]
          ncalrpc:[senssvc]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
 
Protocol: N/A 
Provider: N/A 
UUID    : 2E6035B2-E8F1-41A7-A044-656B439C4C34 v1.0 Proxy Manager provider server endpoint
Bindings: 
          ncalrpc:[LRPC-65f67fa6a35a6296f7]
          ncalrpc:[DeviceSetupManager]
          ncacn_ip_tcp:10.10.10.63[49666]
          ncalrpc:[LRPC-1de7e6b2825dbc3a12]
          ncalrpc:[ubpmtaskhostchannel]
          ncacn_np:\\JEEVES[\PIPE\atsvc]
          ncalrpc:[senssvc]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
 
Protocol: N/A 
Provider: srvsvc.dll 
UUID    : 98716D03-89AC-44C7-BB8C-285824E51C4A v1.0 XactSrv service
Bindings: 
          ncalrpc:[LRPC-65f67fa6a35a6296f7]
          ncalrpc:[DeviceSetupManager]
          ncacn_ip_tcp:10.10.10.63[49666]
          ncalrpc:[LRPC-1de7e6b2825dbc3a12]
          ncalrpc:[ubpmtaskhostchannel]
          ncacn_np:\\JEEVES[\PIPE\atsvc]
          ncalrpc:[senssvc]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
 
Protocol: N/A 
Provider: iphlpsvc.dll 
UUID    : 552D076A-CB29-4E44-8B6A-D15E59E2C0AF v1.0 IP Transition Configuration endpoint
Bindings: 
          ncalrpc:[LRPC-65f67fa6a35a6296f7]
          ncalrpc:[DeviceSetupManager]
          ncacn_ip_tcp:10.10.10.63[49666]
          ncalrpc:[LRPC-1de7e6b2825dbc3a12]
          ncalrpc:[ubpmtaskhostchannel]
          ncacn_np:\\JEEVES[\PIPE\atsvc]
          ncalrpc:[senssvc]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
 
Protocol: N/A 
Provider: N/A 
UUID    : 0D3C7F20-1C8D-4654-A1B3-51563B298BDA v1.0 UserMgrCli
Bindings: 
          ncalrpc:[LRPC-65f67fa6a35a6296f7]
          ncalrpc:[DeviceSetupManager]
          ncacn_ip_tcp:10.10.10.63[49666]
          ncalrpc:[LRPC-1de7e6b2825dbc3a12]
          ncalrpc:[ubpmtaskhostchannel]
          ncacn_np:\\JEEVES[\PIPE\atsvc]
          ncalrpc:[senssvc]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
 
Protocol: N/A 
Provider: N/A 
UUID    : B18FBAB6-56F8-4702-84E0-41053293A869 v1.0 UserMgrCli
Bindings: 
          ncalrpc:[LRPC-65f67fa6a35a6296f7]
          ncalrpc:[DeviceSetupManager]
          ncacn_ip_tcp:10.10.10.63[49666]
          ncalrpc:[LRPC-1de7e6b2825dbc3a12]
          ncalrpc:[ubpmtaskhostchannel]
          ncacn_np:\\JEEVES[\PIPE\atsvc]
          ncalrpc:[senssvc]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
 
Protocol: N/A 
Provider: N/A 
UUID    : 3A9EF155-691D-4449-8D05-09AD57031823 v1.0 
Bindings: 
          ncacn_ip_tcp:10.10.10.63[49666]
          ncalrpc:[LRPC-1de7e6b2825dbc3a12]
          ncalrpc:[ubpmtaskhostchannel]
          ncacn_np:\\JEEVES[\PIPE\atsvc]
          ncalrpc:[senssvc]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
 
Protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol 
Provider: schedsvc.dll 
UUID    : 86D35949-83C9-4044-B424-DB363231FD0C v1.0 
Bindings: 
          ncacn_ip_tcp:10.10.10.63[49666]
          ncalrpc:[LRPC-1de7e6b2825dbc3a12]
          ncalrpc:[ubpmtaskhostchannel]
          ncacn_np:\\JEEVES[\PIPE\atsvc]
          ncalrpc:[senssvc]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
 
Protocol: N/A 
Provider: N/A 
UUID    : 33D84484-3626-47EE-8C6F-E7E98B113BE1 v2.0 
Bindings: 
          ncalrpc:[LRPC-1de7e6b2825dbc3a12]
          ncalrpc:[ubpmtaskhostchannel]
          ncacn_np:\\JEEVES[\PIPE\atsvc]
          ncalrpc:[senssvc]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
 
Protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol 
Provider: taskcomp.dll 
UUID    : 378E52B0-C0A9-11CF-822D-00AA0051E40F v1.0 
Bindings: 
          ncacn_np:\\JEEVES[\PIPE\atsvc]
          ncalrpc:[senssvc]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
 
Protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol 
Provider: taskcomp.dll 
UUID    : 1FF70682-0A51-30E8-076D-740BE8CEE98B v1.0 
Bindings: 
          ncacn_np:\\JEEVES[\PIPE\atsvc]
          ncalrpc:[senssvc]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
 
Protocol: N/A 
Provider: schedsvc.dll 
UUID    : 0A74EF1C-41A4-4E06-83AE-DC74FB1CDD53 v1.0 
Bindings: 
          ncalrpc:[senssvc]
          ncalrpc:[IUserProfile2]
          ncalrpc:[OLEE680C9F7266AA2F2E02A6F9791A1]
 
Protocol: N/A 
Provider: N/A 
UUID    : 7F1343FE-50A9-4927-A778-0C5859517BAC v1.0 DfsDs service
Bindings: 
          ncacn_np:\\JEEVES[\PIPE\wkssvc]
          ncalrpc:[DNSResolver]
          ncalrpc:[nlaapi]
          ncalrpc:[nlaplg]
 
Protocol: N/A 
Provider: N/A 
UUID    : EB081A0D-10EE-478A-A1DD-50995283E7A8 v3.0 Witness Client Test Interface
Bindings: 
          ncalrpc:[DNSResolver]
          ncalrpc:[nlaapi]
          ncalrpc:[nlaplg]
 
Protocol: N/A 
Provider: N/A 
UUID    : F2C9B409-C1C9-4100-8639-D8AB1486694A v1.0 Witness Client Upcall Server
Bindings: 
          ncalrpc:[DNSResolver]
          ncalrpc:[nlaapi]
          ncalrpc:[nlaplg]
 
Protocol: N/A 
Provider: N/A 
UUID    : 4C8D0BEF-D7F1-49F0-9102-CAA05F58D114 v1.0 
Bindings: 
          ncalrpc:[nlaapi]
          ncalrpc:[nlaplg]
 
Protocol: [MS-PAR]: Print System Asynchronous Remote Protocol 
Provider: spoolsv.exe 
UUID    : 76F03F96-CDFD-44FC-A22C-64950A001209 v1.0 
Bindings: 
          ncacn_ip_tcp:10.10.10.63[49667]
          ncalrpc:[LRPC-1ec2af3022c7e6cb68]
 
Protocol: N/A 
Provider: spoolsv.exe 
UUID    : 4A452661-8290-4B36-8FBE-7F4093A94978 v1.0 
Bindings: 
          ncacn_ip_tcp:10.10.10.63[49667]
          ncalrpc:[LRPC-1ec2af3022c7e6cb68]
 
Protocol: [MS-PAN]: Print System Asynchronous Notification Protocol 
Provider: spoolsv.exe 
UUID    : AE33069B-A2A8-46EE-A235-DDFD339BE281 v1.0 
Bindings: 
          ncacn_ip_tcp:10.10.10.63[49667]
          ncalrpc:[LRPC-1ec2af3022c7e6cb68]
 
Protocol: [MS-PAN]: Print System Asynchronous Notification Protocol 
Provider: spoolsv.exe 
UUID    : 0B6EDBFA-4A24-4FC6-8A23-942B1ECA65D1 v1.0 
Bindings: 
          ncacn_ip_tcp:10.10.10.63[49667]
          ncalrpc:[LRPC-1ec2af3022c7e6cb68]
 
Protocol: [MS-RPRN]: Print System Remote Protocol 
Provider: spoolsv.exe 
UUID    : 12345678-1234-ABCD-EF00-0123456789AB v1.0 
Bindings: 
          ncacn_ip_tcp:10.10.10.63[49667]
          ncalrpc:[LRPC-1ec2af3022c7e6cb68]
 
Protocol: N/A 
Provider: N/A 
UUID    : BF4DC912-E52F-4904-8EBE-9317C1BDD497 v1.0 
Bindings: 
          ncalrpc:[LRPC-1c0f34387b2c022e3f]
          ncalrpc:[OLE7D2AA0345767CFFC6337121B73B6]
          ncalrpc:[LRPC-ec983f2884a437c388]
          ncalrpc:[trkwks]
          ncacn_np:\\JEEVES[\pipe\trkwks]
          ncalrpc:[LRPC-10e9bf67ff97b00b46]
 
Protocol: N/A 
Provider: sysmain.dll 
UUID    : B58AA02E-2884-4E97-8176-4EE06D794184 v1.0 
Bindings: 
          ncalrpc:[LRPC-ec983f2884a437c388]
          ncalrpc:[trkwks]
          ncacn_np:\\JEEVES[\pipe\trkwks]
          ncalrpc:[LRPC-10e9bf67ff97b00b46]
 
Protocol: N/A 
Provider: N/A 
UUID    : 5B665B9A-A086-4E26-AE24-96AB050B0EC3 v1.0 Device Association Framework AEP Store Access RPC Interface
Bindings: 
          ncalrpc:[LRPC-4e45c758bb226f0feb]
 
Protocol: N/A 
Provider: N/A 
UUID    : BD84CD86-9825-4376-813D-334C543F89B1 v1.0 Device Association Framework Query RPC Interface
Bindings: 
          ncalrpc:[LRPC-4e45c758bb226f0feb]
 
Protocol: N/A 
Provider: N/A 
UUID    : 2E7D4935-59D2-4312-A2C8-41900AA5495F v1.0 Device Association Framework Challenge RPC Interface
Bindings: 
          ncalrpc:[LRPC-4e45c758bb226f0feb]
 
Protocol: N/A 
Provider: N/A 
UUID    : A1D4EAE7-39F8-4BCA-8E72-832767F5082A v1.0 Device Association Framework Inbound RPC Interface
Bindings: 
          ncalrpc:[LRPC-4e45c758bb226f0feb]
 
Protocol: N/A 
Provider: N/A 
UUID    : 850CEE52-3038-4277-B9B4-E05DB8B2C35C v1.0 Device Association Framework Association RPC Interface
Bindings: 
          ncalrpc:[LRPC-4e45c758bb226f0feb]
 
Protocol: N/A 
Provider: pcasvc.dll 
UUID    : 0767A036-0D22-48AA-BA69-B619480F38CB v1.0 PcaSvc
Bindings: 
          ncalrpc:[LRPC-10e9bf67ff97b00b46]
 
Protocol: N/A 
Provider: N/A 
UUID    : 51A227AE-825B-41F2-B4A9-1AC9557A1018 v1.0 Ngc Pop Key Service
Bindings: 
          ncacn_ip_tcp:10.10.10.63[49668]
          ncalrpc:[Vault]
          ncalrpc:[samss lpc]
          ncalrpc:[SidKey Local End Point]
          ncalrpc:[protected_storage]
          ncalrpc:[lsasspirpc]
          ncalrpc:[lsapolicylookup]
          ncalrpc:[LSA_EAS_ENDPOINT]
          ncalrpc:[LSA_IDPEXT_ENDPOINT]
          ncalrpc:[lsacap]
          ncalrpc:[LSARPC_ENDPOINT]
          ncalrpc:[securityevent]
          ncalrpc:[audit]
          ncacn_np:\\JEEVES[\pipe\lsass]
 
Protocol: N/A 
Provider: N/A 
UUID    : 8FB74744-B2FF-4C00-BE0D-9EF9A191FE1B v1.0 Ngc Pop Key Service
Bindings: 
          ncacn_ip_tcp:10.10.10.63[49668]
          ncalrpc:[Vault]
          ncalrpc:[samss lpc]
          ncalrpc:[SidKey Local End Point]
          ncalrpc:[protected_storage]
          ncalrpc:[lsasspirpc]
          ncalrpc:[lsapolicylookup]
          ncalrpc:[LSA_EAS_ENDPOINT]
          ncalrpc:[LSA_IDPEXT_ENDPOINT]
          ncalrpc:[lsacap]
          ncalrpc:[LSARPC_ENDPOINT]
          ncalrpc:[securityevent]
          ncalrpc:[audit]
          ncacn_np:\\JEEVES[\pipe\lsass]
 
Protocol: N/A 
Provider: N/A 
UUID    : B25A52BF-E5DD-4F4A-AEA6-8CA7272A0E86 v2.0 KeyIso
Bindings: 
          ncacn_ip_tcp:10.10.10.63[49668]
          ncalrpc:[Vault]
          ncalrpc:[samss lpc]
          ncalrpc:[SidKey Local End Point]
          ncalrpc:[protected_storage]
          ncalrpc:[lsasspirpc]
          ncalrpc:[lsapolicylookup]
          ncalrpc:[LSA_EAS_ENDPOINT]
          ncalrpc:[LSA_IDPEXT_ENDPOINT]
          ncalrpc:[lsacap]
          ncalrpc:[LSARPC_ENDPOINT]
          ncalrpc:[securityevent]
          ncalrpc:[audit]
          ncacn_np:\\JEEVES[\pipe\lsass]
 
Protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol 
Provider: samsrv.dll 
UUID    : 12345778-1234-ABCD-EF00-0123456789AC v1.0 
Bindings: 
          ncacn_ip_tcp:10.10.10.63[49668]
          ncalrpc:[Vault]
          ncalrpc:[samss lpc]
          ncalrpc:[SidKey Local End Point]
          ncalrpc:[protected_storage]
          ncalrpc:[lsasspirpc]
          ncalrpc:[lsapolicylookup]
          ncalrpc:[LSA_EAS_ENDPOINT]
          ncalrpc:[LSA_IDPEXT_ENDPOINT]
          ncalrpc:[lsacap]
          ncalrpc:[LSARPC_ENDPOINT]
          ncalrpc:[securityevent]
          ncalrpc:[audit]
          ncacn_np:\\JEEVES[\pipe\lsass]
 
Protocol: [MS-CMPO]: MSDTC Connection Manager: 
Provider: msdtcprx.dll 
UUID    : 906B0CE0-C70B-1067-B317-00DD010662DA v1.0 
Bindings: 
          ncalrpc:[LRPC-f706e18972357b99d3]
          ncalrpc:[OLE6BBC625EE63B739C82A9F85DF851]
          ncalrpc:[LRPC-2b7e59ed2147138cb8]
          ncalrpc:[LRPC-2b7e59ed2147138cb8]
          ncalrpc:[LRPC-2b7e59ed2147138cb8]
 
Protocol: [MS-SCMR]: Service Control Manager Remote Protocol 
Provider: services.exe 
UUID    : 367ABB81-9844-35F1-AD32-98F038001003 v2.0 
Bindings: 
          ncacn_ip_tcp:10.10.10.63[49669]
 
Protocol: N/A 
Provider: N/A 
UUID    : F3F09FFD-FBCF-4291-944D-70AD6E0E73BB v1.0 
Bindings: 
          ncalrpc:[LRPC-aa54de8bbdcd0c3d05]
 
[*] Received 457 endpoints.

impacket-rpcdump returned a total of 457 RPC endpoints from the target system

spoolsv.exe is running via [MS-PAR], [MS-PAN] and [MS-RPRN]

IOXIDResolver

┌──(kali㉿kali)-[~/archive/htb/labs/jeeves]
└─$ python3 IOXIDResolver.py -t $IP                                      
[*] Retrieving network interface of 10.10.10.63
address: Jeeves
address: 10.10.10.63

IOXIDResolver.py returned the hostname of the target system; Jeeves

Interactive Graph View

Backlinks