evilrdp

🚩 Sponsors If you like this project, consider sponsoring it on GitHub! Sponsors EVILRDP - More control over RDP Th evil twin of aardwolfgui using the aardwolf RDP client library that gives you extended control over the target and additional scripting capabilities from the command line. Features...

rdesktop

중요: rdesktop은 더 이상 유지 관리되지 않습니다 이 프로젝트는 더 이상 유지 관리되지 않으며 수년간 패치를 받지 못했습니다. 보안 취약점이 보고되었지만, 아직 검토되지 않았습니다. 주의해서 사용하고, 사용에 따른 모든 책임은 본인에게 있습니다. rdesktop - 원격 데스크톱 프로토콜 클라이언트 rdesktop은 Microsoft의 RDP 프로토콜을 위한 오픈 소스 클라이언트입니다. 이 클라이언트는 Windows NT 4 터미널 서버부터 Windows 2012 R2 RDS까지의 Windows 버전에서 작동하는 것으로...

grdpwasm

grdpwasm 웹 기반 RDP 클라이언트입니다. Go WebAssembly와 grdp로 구축되었습니다. 브라우저에서 직접 Windows 원격 데스크톱 서버에 연결하세요 — 플러그인이 필요하지 않습니다. 아키텍처 root@kitploit: Browser WASM ──WebSocket──► proxy Go ──TCP──► RDP Server 브라우저는 원시 TCP 소켓을 열 수 없기 때문에, 경량 Go 프록시 서버가 브라우저의 WebSocket 연결을 RDP 서버의 TCP 포트로 브리징합니다. 요구 사항 Go 1.24 이상 접근...

aardwolf

🚩 Sponsors このプロジェクトが気に入ったら、ブラウザで動作するフルペンテストスイートであるOctoPwnのライセンス購入を検討してください！ 新しいビルド/リリースの通知やその他の情報については、Discordに参加してください。 AARDWOLF - Python製の非同期RDP/VNCクライアント（ヘッドレス） このプロジェクトは、RDPおよびVNCプロトコルを試すことを目的としています。 このプロジェクトにはGUIは含まれません。GUIクライアントについてはaardwolfguiを確認してください。 🚩 ブラウザで動作...

cve-2019-1108

CVE-2019-1108 エクスプロイト root@kitploit: CVE-2019-1108 Remote Desktop Protocol Client Information Disclosure Vulnerability Published: 07/09/2019 | Last Updated : 11/19/2019 MITRE CVE-2019-1108 An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents...

loki

loki NCC Group Plc によりオープンソースとして公開 - http://www.nccgroup.com/ Dave Spencer によって開発（david dot spencer at nccgroup dot com） http://www.github.com/nccgroup/Loki AGPL のもとで公開されています。詳細は LICENSE を参照してください 説明 Loki（Limited Obstructive Keyboard Impersonator）には RDP...

Vulnerability of the avc444_ensure_buffer() function in the libfreerdp/codec/h264.c file of the RDP client FreeRDP, allowing a intruder to execute arbitrary code

The vulnerability of the avc444ensurebuffer function in the libfreerdp/codec/h264.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2026-91961

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can send a Universal Serial Bus USB Redirection for Remote Desktop Connection URBDRC control-transfer request with an invalid OutputBufferSize. This can trigger an assertion in the client process, leading to a denial of...

CVE-2026-91964

FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in negosendnegotiationrequest when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written...

DEBIAN-CVE-2026-91961

FreeRDP before 3.31.0 contains a denial-of-service vulnerability in the URBDRC control-transfer request path that fails to validate OutputBufferSize before forwarding to the libusb backend. A malicious RDP server can send a control-transfer request with OutputBufferSize set to 65536, triggering a...

DEBIAN-CVE-2026-91954

FreeRDP before 3.31.0 contains a null pointer dereference vulnerability in gdisurfacebits when processing Surface Bits commands with NSCodec codec ID. A malicious RDP server can crash a FreeRDP client by sending a crafted Surface Bits command claiming to use NSCodec, even when the codec is disabl...

CVE-2026-91964 FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken

FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in negosendnegotiationrequest when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written...

CVE-2026-91964 FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken

FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in negosendnegotiationrequest when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written...

CVE-2026-91954 FreeRDP before 3.31.0 NULL Pointer Dereference via NSCodec

FreeRDP before 3.31.0 contains a null pointer dereference vulnerability in gdisurfacebits when processing Surface Bits commands with NSCodec codec ID. A malicious RDP server can crash a FreeRDP client by sending a crafted Surface Bits command claiming to use NSCodec, even when the codec is disabl...

CVE-2026-91952 FreeRDP before 3.31.0 Denial of Service via pool_decode_rect

FreeRDP versions before 3.31.0 contain an infinite-loop denial of service in the pooldecoderect function when decoding AVC444 metablocks with more region rectangles than preallocated worker array size. A malicious RDP server can send crafted AVC444 graphics updates causing the threaded decode pat...

EUVD-2026-78802

FreeRDP versions before 3.31.0 contain an out-of-bounds read vulnerability in smartcard response decoders that fail to validate ATR length fields against fixed inline arrays. Authenticated RDP clients can send oversized ATR lengths in PAKIDCOREDEVICEIOCOMPLETION responses to trigger reads past...

PT-2026-92075

FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's func get ep desc function that indexes interface arrays by position instead of protocol field InterfaceNumber. A malicious RDP server can send a crafted SELECT CONFIGURATION message with permuted...

PT-2026-92083

FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego send negotiation request when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets...

[SECURITY] Fedora 43 Update: freerdp2-2.11.7-16.fc43

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

[SECURITY] Fedora 44 Update: freerdp2-2.11.7-16.fc44

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...