Rapid7’s 2026 Global Cybersecurity Summit is now available on-demand.Watch sessions.
Rapid7

module

MS-NRPC Domain Users Enumeration

Disclosed
N/A

Description

This module will enumerate valid Domain Users via no authentication against MS-NRPC interface.
It calls DsrGetDcNameEx2 to check if the domain user account exists or not. It has been tested with
Windows servers 2012, 2016, 2019 and 2022.
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.