MSRPC: introduction

• Microsoft implementation of DCE RPC

  • Used in all versions of Windows NT, at all levels
    • Typical use: NT domains, remote administration, DCOM
    • A brief history of Windows
      • http://www.advogato.org/article/596.html

• Transport independent

  • TCP/IP, IPX/SPX, NETBEUI,...
    • SMB transport (Windows-specific), using named pipes as DCE RPC endpoints
    • DCE RPC Protocol Data Units (PDUs) are sent over named pipes, using SMB commands