Skip to content

Instantly share code, notes, and snippets.

@enigma0x3
Last active September 27, 2023 16:06
Show Gist options
  • Save enigma0x3/e3a5cd6db3adfe096e53f93586065498 to your computer and use it in GitHub Desktop.
Save enigma0x3/e3a5cd6db3adfe096e53f93586065498 to your computer and use it in GitHub Desktop.
$rpc = ls C:\Windows\System32\*.exe, C:\Windows\System32\*.dll |Get-RpcServer -DbgHelpPath "C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\dbghelp.dll"
foreach ($rpc1 in $rpc)
{
$ourObject = New-Object -TypeName psobject
$ourObject | Add-Member -MemberType NoteProperty -Name InterfaceID -Value $rpc1.InterfaceID
$ourObject | Add-Member -MemberType NoteProperty -Name FileName -Value $rpc1.Name
$ourObject | Add-Member -MemberType NoteProperty -Name IsRunning -Value $rpc1.IsServiceRunning
$ourObject | Add-Member -MemberType NoteProperty -Name EndpointCount -Value $rpc1.EndpointCount
$procs = $rpc1.Procedures.Name | Out-String
$ourObject | Add-Member -MemberType NoteProperty -Name Procedures -Value $procs
$ourObject | fl | Out-file -Encoding ASCII rpc.txt -Append
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment