Legacy_MSRPC

MSRPC

---

Nmap discovered a MSRPC service on the target port 135

┌──(kali㉿kali)-[~/archive/htb/labs/legacy]
└─$ rpcclient $IP -N -U ''
rpcclient $> lsaenumsid
do_cmd: Could not initialise lsarpc. Error was NT_STATUS_ACCESS_DENIED
rpcclient $> enumprinters
No printers returned.
rpcclient $> enumdomusers
do_cmd: Could not initialise samr. Error was NT_STATUS_ACCESS_DENIED
rpcclient $> enumdomgroups
do_cmd: Could not initialise samr. Error was NT_STATUS_ACCESS_DENIED
rpcclient $> lsaquery
do_cmd: Could not initialise lsarpc. Error was NT_STATUS_ACCESS_DENIED
rpcclient $> netshareenumall
do_cmd: Could not initialise srvsvc. Error was NT_STATUS_ACCESS_DENIED

The MSRPC service allows anonymous access, but it requires authentication to further enumerate

RPC Endpoint

---

┌──(kali㉿kali)-[~/archive/htb/labs/legacy]
└─$ impacket-rpcdump $IP
Impacket v0.10.0 - Copyright 2022 SecureAuth Corporation
 
[*] Retrieving endpoint list from 10.10.10.4
[-] Protocol failed: rpc_s_access_denied
[*] No endpoints found.

Denied.

IOXIDResolver

---

┌──(kali㉿kali)-[~/archive/htb/labs/legacy]
└─$ python3 /home/kali/testing/Active_Directory/12262022/IOXIDResolver.py -t $IP
[*] Retrieving network interface of 10.10.10.4
address: legacy
address: 10.10.10.4

No additional info