RDPHijack-BOF

BOF - RDPHijack Cobalt Strike 信标对象文件 BOF，使用 WinStationConnect API 执行本地/远程 RDP 会话劫持。拥有会话所有者的有效访问令牌 / Kerberos 票据（例如黄金票据）后，您将能够远程劫持该会话，而无需在目标服务器上放置任何信标/工具。 要在本地/远程枚举会话，您可以使用 Quser-BOF。 截图 用法 root@kitploit: Usage: bof-rdphijack your console session id target session id to hijack password|server...

RDPHijack-BOF - Cobalt Strike Beacon Object File (BOF) That Uses WinStationConnect API To Perform Local/Remote RDP Session Hijacking

Cobalt Strike Beacon Object File BOF that uses WinStationConnect API to perform local/remote RDP session hijacking. With a valid access token / kerberos ticket e.g., golden ticket of the session owner, you will be able to hijack the session remotely without dropping any beacon/tool on the target...