ports remote request powershell

Question

Hello.

I have executed the get-service -computername PC01 command

Wireshark showed me that port 135 is used in the first request.

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/what-port-does-powershell-remoting-use/ba-p/571480

https://learn.microsoft.com/en-us/answers/questions/1134852/can-i-use-powershell-to-open-firewall-ports-remote

I found information that RPC and WINRM ports are used, this I was aware of. But where can I find the official documentation where the 135 port is described ?

Answer 1

Remote Procedure Call (RPC) isn't MIcrosoft-specific. You'll find many Request For Comments (RFCs) that describe the protocol, its use of dynamic ports, and it binding and authentication.

https://learn.microsoft.com/en-us/windows/win32/rpc/rpc-start-page

This might be a better place to start: https://virtuedesktops.info/port-135/#:~:text=Port-135%20is%20essential%20for%20Remote%20Procedure%20Call%20%28RPC%29,and%20interactions%20between%20computers%20more%20efficient%20and%20seamless.