Microsoft Remote Procedure Call (MSRPC) Protocol
What is MSRPC (Microsoft Remote Procedure Call)?
How Does MSRPC Work?
The goal of MSRPC is to simplify interprocess communication between clients and servers, enabling a client to call a service on a remote server with a standard interface (rather than with a custom protocol). Each interface has several operations or opnums (also known as methods). Client and server stubs—small programs that substitute for larger code implementations—have the ability to run a process that corresponds with the interface and operation in the function call.
To make a function call, the client sends an MSRPC request with an interface and operation to a remote server. MSRPC requests are tunneled through network protocols such as SMB/CIFS, HTTP, or TCP. Essentially, MSRPC is the transport mechanism and the interface and operation within the MSRPC request provides the functionality on the remote server.