Use rpc null sessions to retrieve machine list, domain admin list, domain controllers
-
Updated
Dec 15, 2022 - Shell
#
null-session
Here are 2 public repositories matching this topic...
A multi-protocol (LDAP, SMB, SAMR) enumerator designed to turn initial access into actionable findings. Supports anonymous scouting, authenticated auditing, and Pass-the-Hash.
python ldap smb active-directory enumeration kerberos pentesting winrm cve pass-the-hash access-control offensive-security impacket red-teaming kerberoasting laps null-session samr as-rep-roasting
-
Updated
Jan 17, 2026 - Python
Improve this page
Add a description, image, and links to the null-session topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the null-session topic, visit your repo's landing page and select "manage topics."