Remote-Desktop-Caching-

远程桌面缓存恢复工具 该工具允许用户以损坏的PNG文件形式恢复旧的RDP（mstsc）会话信息。这些PNG文件使红队成员能够提取LAPS密码或屏幕上的任何敏感信息。蓝队成员可以重建PNG文件，查看攻击者在受感染主机上做了什么。对于取证团队来说，在主机遭受攻击后提取时间戳以收集证据并进行进一步分析非常有用。 欢迎对本工具提出任何建议或想法——只需在推特上联系我 @ManiarViral 截图 首次运行 Remote-Desktop-Caching 时，使用 python.exe remotecache.py，用户将看到如下选项： 使用 选项1 和...

AutoRDPwn v4.5 - The Shadow Attack Framework

AutoRDPwn is a script created in Powershell and designed to automate the Shadow attack on Microsoft Windows computers. This vulnerability allows a remote attacker to view his victim's desktop without his consent, and even control it on request. For its correct operation, it is necessary to comply...

Remote Desktop Caching - Tool To Recover Old RDP (mstsc) Session Information In The Form Of Broken PNG Files

This tool allows one to recover old RDP mstsc session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an...