DCOM ¶

DCOM is a Microsoft technology that allows applications to communicate with each other over a network. For instance, it's used to remotely access Windows Management Instrumentation (WMI).

🐊️ Ports:

• 135 (TCP) — default initial port for connections
• Random port (TCP) — used after the initial handshake

DCOM is built on top of MSRPC, which is why it uses the same port.

You can use impacket to obtain a powershell:

$ impacket-wmiexec -shell-type powershell username:password@IP
$ impacket-wmiexec -shell-type powershell username:password@IP "hostname"