Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
RPC-Backdoor — A basic emulation of an "RPC Backdoor" | Kitploit
Tools/GitHubGitHub/eladshamir/rpc-backdoor
Privilege EscalationLateral MovementPost-ExploitationCommand and ControlRed TeamingRemote Access Tool
GitHubeladshamir/rpc-backdoor

RPC-Backdoor

A basic emulation of an "RPC Backdoor"

View Repository
241473 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

RPC Backdoor Emulation

This project is a basic implementation of an "RPC Backdoor" meant to emulate TTPs used by certain groups.

The project contains an RPC server with five functions:

  • Execute a command with cmd.exe /c and the CreateProcess API call.
  • Steal a token and execute a command with cmd.exe /c and the CreateProcessWithTokenW API call.
  • Download a file from the remote host.
  • Upload a file to the remote host.
  • Terminate the RPC server.

The server is implemented both as an executable (RpcServer) and a DLL (RpcServerDll).

The server registers two RPC servers:

  1. RPC over named pipes with the hard-coded pipe name "ncacn_np".
  2. RPC over TCP/IP with the hard-coded port number 4747.

The client is implemented both as a native executable (RpcClient) and a .NET executable (RpcSharpClient).

Download Tool