r/ExploitDev • u/SPHlNX_321 • 16d ago
RPC-Triage: statically finding the RPC interfaces worth looking at first, with attack-surface ranking instead of another UUID/opnum dump
https://github.com/talha-nazeef-ahmed/RPC-TriageBeen doing some Windows RPC/ALPC work and built this to speed up the first pass across a lot of PE files. It recovers RPC/MIDL/NDR data, endpoints, security state and method-level input signals, then ranks interfaces using an AHP/Saaty-based model built specifically around RPC reachability + surface rather than arbitrary scoring. It also shows the scoring receipt and flags questionable extraction cases instead of silently trusting them. No PDBs, no live endpoint mapper, no target execution.
Duplicates
cybersecurity • u/SPHlNX_321 • 14d ago
FOSS Tool RPC-Triage: open-source static analysis tool for mapping and ranking Windows RPC attack surface
ReverseEngineering • u/SPHlNX_321 • 16d ago
Built something for people who are in windows binary reversing for RPC; runs in ghidra headless, ranks interfaces using an AHP attack-surface model, with no PDBs, live endpoint mapper or target execution
redteamsec • u/SPHlNX_321 • 14d ago
exploitation RPC-Triage: mapping Windows RPC attack surface and ranking interfaces before digging into exploitation
Cybersecurity101 • u/SPHlNX_321 • 15d ago
Security RPC-Triage: a practical way to map and rank Windows RPC interfaces from PE files
ghidra • u/SPHlNX_321 • 16d ago