rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

redsnarf

. \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and domain controllers...

CVE-2019-0708

Microsoft 3389 Remote Desktop Vulnerability CVE-2019-0708 Mass Detection Tool 0x001 Detection on Windows https://github.com/robertdavidgraham/rdpscan C:\Users\K8team\Desktop\rdpscan-master\vs10\Release 的目录 2019/06/02 02:11 . 2019/06/02 02:11 .. 2019/06/02 01:55 2,582,016 libcrypto-11.dll 2019/06/...

wireshark-rdp

Sample RDP Wireshark capture files Here is a collection of RDP decrypted capture files, showing various scenarios. RDP with NLA, Kerberos password authentication 1 rdp-nla-kerberos-auth1.pcapng Username: [email protected] Server: IT-HELP-TEST.ad.it-help.ninja Authentication: RDP NLA with...

nlahoney

NLA Honeypot Associated Research FreeRDP-ResearchServer/: a modified FreeRDP 2.2.0 that completes a RDP handshake, kicks out the user since there are no accounts set up, and dumps the six messages into /tmp FreeRDP-Pot-Patches/: patches for FreeRDP server which is intended for production that...

PT-2026-128105

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls flower: validate mask pointer after nla next fl set enc opt iterates the key's nested tunnel-option attributes with nla for each attr while advancing a single mask pointer via nla next at the bottom of each loop, s...

CVE-2026-111378

A flaw was found in FreeRDP. An unauthenticated remote attacker can cause a Denial of Service DoS by exhausting server memory. When processing Network Level Authentication NLA connections over Transport Layer Security TLS, the server misinterprets invalid protocol bytes as an incomplete packet...

CVE-2026-111378 FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser

FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parsenlamodepdu that allows unauthenticated attackers to exhaust server memory. Attackers can complete TLS and stream bytes not beginning with the DER SEQUENCE tag 0x30, causing unbounded receive buffe...

CVE-2026-111378 FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser

FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parsenlamodepdu that allows unauthenticated attackers to exhaust server memory. Attackers can complete TLS and stream bytes not beginning with the DER SEQUENCE tag 0x30, causing unbounded receive buffe...

CVE-2026-111378

The FreeRDP software, versions 3.0.0 before 3.32.0 , contains an uncontrolled resource consumption vulnerability within the parse_nla_mode_pdu function. An unauthenticated attacker can trigger this by completing a TLS handshake and streaming bytes that do not begin with the DER SEQUENCE tag 0x30 ...

CVE-2026-111378 FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser

FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parsenlamodepdu that allows unauthenticated attackers to exhaust server memory. Attackers can complete TLS and stream bytes not beginning with the DER SEQUENCE tag 0x30, causing unbounded receive buffe...

Red Hat: CVE-2026-111378: freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser

FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parsenlamodepdu that allows unauthenticated attackers to exhaust server memory. Attackers can complete TLS and stream bytes not beginning with the DER SEQUENCE tag 0x30, causing unbounded receive buffe...

PT-2026-115384

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.31.0 Description An uncontrolled resource consumption issue exists in the parse nla mode pdu function. Unauthenticated attackers can exhaust server memory by completing TLS and streaming bytes that do not begin...

FreeRDP resource management error vulnerability

FreeRDP versions from 3.0.0 to 3.32.0 have a resource management vulnerability. This vulnerability stems from an uncontrolled resource consumption issue in the parsenlamodepdu function. Unverified attackers can successfully perform TLS negotiations and send byte streams that do not start with the...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Add length check when parsing nlattrs There are three places where qla4xxx parses nlattrs: - qla4xxxsetchapentry - qla4xxxifacesetparam - qla4xxxsysfsddbsetparam Each of these functions directly converts the nlattr...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.30.0, the kerberosDecryptMessage function in FreeRDP’s winpr/libwinpr/sspi/Kerberos/kerberos.c failed to properly bind the peer-controlled “GSS Wrap-token” EC field before using it with RRC in IOV pointer offsets...

Astra Linux – vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a double-free vulnerability in kerberosAcceptSecurityContext and kerberosInitializeSecurityContextA WinPR, winpr/libwinpr/sspi/Kerberos/kerberos.c could cause a crash in any FreeRDP clients on systems where...

rdpy

RDPY Protocolo de Escritorio Remoto en twisted python. RDPY es una implementación pura en Python del protocolo Microsoft RDP Remote Desktop Protocol lado cliente y servidor. RDPY está construido sobre el motor de red orientado a eventos Twisted. RDPY soporta la capa de seguridad estándar de RDP,...

FreeRDP: FreeRDP: Out-of-bounds memory access in Kerberos decryption

A flaw in FreeRDP's Kerberos implementation allows a malicious RDP peer to cause an out-of-bounds memory access by providing an unbounded GSS Wrap-token EC field. This occurs during CredSSP/NLA decryption and can lead to a denial of service or information disclosure...

PT-2026-94461

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free read occurs in the netdevsim component when a queue reset is performed, such as via queue reset debugfs. The nsim queue start function replaces the receive queue ns...