lookupsid.py

RID cycling over MS-RPC: resolves SIDs to usernames (impacket).

An impacket tool for RID cycling over MS-RPC. It translates the domain SIDs to user and group names, useful to pull the account list (even with a null or guest session) and to get the domain SID.

Family SMB, NetBIOS & RPC

Flags <domain>/<user>:<pass>@<ip>

Concepts RID cycling

Cheatsheet Enumeration

Installation

# All of Impacket's *.py tools ship in the same package:
pipx install impacket
# invoke them as impacket-<tool> or <Tool>.py depending on the packaging

Repositorygithub.com/fortra/impacket

Useful commands3 commands

Appears in

Some machines where its use is documented; not an exhaustive list.

HeistHackTheBox