Blog

Security Research

An Overview of MS-RPC and Its Security Mechanisms

Ben Barnea is a Security Researcher at Akamai with interest and experience in conducting low-level security research and vulnerability research across various architectures, including Windows, Linux, IoT, and mobile. He enjoys learning how complex mechanisms work and, more important, how they fail.

Because of the nature of RPC as a remote vector, it gathers a lot of attention from a security point of view.

What is RPC?

\r\n How does MS-RPC work?

\r\n RPC security for remote requests

\r\n Transport authentication

\r\n Binding authentication

\r\n Endpoint security

\r\n Interface security

\r\n Systemwide policies

\r\n Procedure security checks

\r\n Summary

\r\n"}}"> What is RPC?

How does MS-RPC work?

RPC security for remote requests

Transport authentication

Binding authentication

Endpoint security

Interface security

Systemwide policies

Procedure security checks

Summary

What is RPC?

\r\n A remote procedure call (…