rpcdump.py, rpcmap.py, impacket-rpcdump, impacket-rpcmap: add page

pages/common/impacket-rpcdump.md

@@ -0,0 +1,8 @@
+# impacket-rpcdump
+
+> This command is an alias of `rpcdump.py`.
+> More information: <https://github.com/fortra/impacket>.
+
+- View documentation for the original command:
+
+`tldr rpcdump.py`

pages/common/impacket-rpcmap.md

@@ -0,0 +1,8 @@
+# impacket-rpcmap
+
+> This command is an alias of `rpcmap.py`.
+> More information: <https://github.com/fortra/impacket>.
+
+- View documentation for the original command:
+
+`tldr rpcmap.py`

pages/common/rpcdump.py.md

@@ -0,0 +1,25 @@
+# rpcdump.py
+
+> Dump remote RPC endpoints information via the Endpoint Mapper.
+> Part of the Impacket suite.
+> More information: <https://github.com/fortra/impacket>.
+
+- Dump RPC endpoints using username and password:
+
+`rpcdump.py {{domain}}/{{username}}:{{password}}@{{target}}`
+
+- Dump RPC endpoints using NTLM hashes:
+
+`rpcdump.py -hashes {{LMHASH}}:{{NTHASH}} {{domain}}/{{username}}:{{password}}@{{target}}`
+
+- Specify a target IP address explicitly (useful if the target name is a NetBIOS name):
+
+`rpcdump.py -target-ip {{target_ip}} {{domain}}/{{username}}:{{password}}@{{target}}`
+
+- Connect to a specific port (default is 135 for RPC Endpoint Mapper):
+
+`rpcdump.py -port {{port_number}} {{domain}}/{{username}}:{{password}}@{{target}}`
+
+- Enable debug output:
+
+`rpcdump.py -debug {{domain}}/{{username}}:{{password}}@{{target}}`

pages/common/rpcmap.py.md

@@ -0,0 +1,37 @@
+# rpcmap.py
+
+> Lookup listening MSRPC interfaces using a string binding (e.g., `ncacn_ip_tcp:host[port]`).
+> Part of the Impacket suite.
+> More information: <https://github.com/fortra/impacket>.
+
+- Connect to an MSRPC interface using a string binding (e.g., `ncacn_ip_tcp:host[port]`):
+
+`rpcmap.py {{stringbinding}}`
+
+- Bruteforce UUIDs even if the MGMT interface is available:
+
+`rpcmap.py -brute-uuids {{stringbinding}}`
+
+- Bruteforce operation numbers (opnums) for discovered UUIDs:
+
+`rpcmap.py -brute-opnums {{stringbinding}}`
+
+- Bruteforce major versions of found UUIDs:
+
+`rpcmap.py -brute-versions {{stringbinding}}`
+
+- Specify a target IP address manually:
+
+`rpcmap.py -target-ip {{ip_address}} {{stringbinding}}`
+
+- Authenticate to the RPC interface with username and password:
+
+`rpcmap.py -auth-rpc {{domain}}/{{username}}:{{password}} {{stringbinding}}`
+
+- Authenticate using NTLM hashes for RPC:
+
+`rpcmap.py -hashes-rpc {{LMHASH:NTHASH}} {{stringbinding}}`
+
+- Enable debug output for verbose information:
+
+`rpcmap.py -debug {{stringbinding}}`