rpcclient

MS-RPC client tool (part of the samba suite). More information: https://www.samba.org/samba/docs/current/man-html/rpcclient.1.html.

rpcclient --user domain\username%password ip

rpcclient --user username --workgroup domain --no-pass ip

rpcclient --user domain\username --pw-nt-hash ip

rpcclient --user domain\username%password --command semicolon_separated_commands ip

rpcclient $> enumdomusers

rpcclient $> enumprivs

rpcclient $> queryuser username|rid

rpcclient $> createdomuser username