corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0ca8a-cc63-70f6-9e27-ec6706de4c9e

A journey into forgotten Null Session and MS-RPC interfaces, part 2

Kaspersky Securelist · published 4 April 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securelist.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
54
Words captured
4,198

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
A journey into forgotten Null Session and MS-RPC interfaces Read at the source ↗
securelist.com
https://learn.microsoft.com/en-us/windows-server/security/rpc-interface-restrict
learn.microsoft.com
https://techcommunity.microsoft.com/blog/askds/restrictions-for-unauthenticated-rpc-clients-the-group-policy-that-punches-your-/399128
techcommunity.microsoft.com
https://learn.microsoft.com/en-us/windows/win32/wmisdk/wmi-start-page
learn.microsoft.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01135242/ms-rpc-security.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01140807/ms-rpc-security2-1.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01141231/ms-rpc-security3-2.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01141402/ms-rpc-security4.png
media.kasperskycontenthub.com
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-10/security/threat-protection/auditing/event-5712
learn.microsoft.com
https://learn.microsoft.com/en-us/windows-hardware/drivers/devtest/event-tracing-for-windows--etw-
learn.microsoft.com
https://github.com/zeronetworks/rpcfirewall
github.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01141620/ms-rpc-security5.png
media.kasperskycontenthub.com
https://www.tiraniddo.dev/2021/08/how-to-secure-windows-rpc-server-and.html
tiraniddo.dev
https://learn.microsoft.com/en-us/windows/win32/api/rpcdce/nf-rpcdce-rpcserverregisterif2
learn.microsoft.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01141818/ms-rpc-security6.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01141915/ms-rpc-security7.png
media.kasperskycontenthub.com
https://learn.microsoft.com/en-us/windows/win32/api/rpcdce/nf-rpcdce-rpcserveruseprotseqep
learn.microsoft.com
https://learn.microsoft.com/en-us/windows/win32/api/rpcdce/nf-rpcdce-rpcserverregisterif3
learn.microsoft.com
https://learn.microsoft.com/en-us/windows/win32/api/securitybaseapi/nf-securitybaseapi-impersonateanonymoustoken
learn.microsoft.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01142116/ms-rpc-security8.png
media.kasperskycontenthub.com
https://learn.microsoft.com/en-us/windows/win32/api/securitybaseapi/nf-securitybaseapi-accesscheck
learn.microsoft.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01142217/ms-rpc-security9.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01142353/ms-rpc-security10.png
media.kasperskycontenthub.com
https://learn.microsoft.com/en-us/windows/win32/api/rpcdce/nf-rpcdce-rpcbindingsetauthinfoexw
learn.microsoft.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01142435/ms-rpc-security11.png
media.kasperskycontenthub.com
https://github.com/akamai/akamai-security-research/blob/main/rpc_toolkit/msrpc_security_flowchart.png
github.com
https://github.com/akamai/akamai-security-research/tree/main/rpc_toolkit
github.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01142637/ms-rpc-security12.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01142720/ms-rpc-security13.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01142821/ms-rpc-security14.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01142858/ms-rpc-security15.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01142949/ms-rpc-security16.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01143039/ms-rpc-security17.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01143607/ms-rpc-security18.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01143637/ms-rpc-security19.png
media.kasperskycontenthub.com
https://github.com/akamai/akamai-security-research/tree/main/rpc_toolkit/pe_rpc_if_scraper
github.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01143758/ms-rpc-security20.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01143935/ms-rpc-security21.png
media.kasperskycontenthub.com
https://learn.microsoft.com/en-us/windows/win32/etw/alpc
learn.microsoft.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01144051/ms-rpc-security22.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01144346/ms-rpc-security23.png
media.kasperskycontenthub.com
https://learn.microsoft.com/en-us/windows/win32/api/rpcasync/nf-rpcasync-rpcserverinqcallattributesw
learn.microsoft.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01144513/ms-rpc-security24.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01144619/ms-rpc-security25.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01144725/ms-rpc-security26.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01144829/ms-rpc-security27.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01144944/ms-rpc-security28.png
media.kasperskycontenthub.com
https://learn.microsoft.com/en-us/windows/win32/secauthz/security-descriptor-definition-language
learn.microsoft.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01145037/ms-rpc-security29.png
media.kasperskycontenthub.com
https://learn.microsoft.com/en-us/windows/win32/secauthz/dacls-and-aces
learn.microsoft.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01145135/ms-rpc-security30.png
media.kasperskycontenthub.com
https://www.powershellgallery.com/packages/NtObjectManager/1.1.32
powershellgallery.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01145239/ms-rpc-security31.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/01145325/ms-rpc-security32.png
media.kasperskycontenthub.com