Tools to exploit NULL sessions

• rpcclient

  • Command-line tool implementing interesting MSRPC interfaces
  • Two versions (Samba-TNG, Samba), supporting different set of MSRPC operations
  • Samba4's rpcclient currently in development (using Python wrappers)

• Nessus NASL scripts

  • Tenable recently developped new SMB and MSRPC implementations for Nessus
  • Some NASL scripts can be used standalone, with the nasl command