rdesktop

重要: rdesktop 已不再维护 请注意，该项目已不再维护，并且多年来未收到任何补丁。已有报告的安全漏洞，但这些漏洞尚未经过审查。 请谨慎使用，风险自负。 rdesktop - 远程桌面协议客户端 rdesktop 是微软 RDP 协议的开源客户端。已知可与从 NT 4 终端服务器到 Windows 2012 R2 RDS 的 Windows 版本配合使用。rdesktop 目前已实现 RDP 版本 4 和 5 协议。 安装 rdesktop 使用 GNU 风格的构建过程。通常，安装 rdesktop 所需只需以下步骤： % ./configure % make % make...

grdpwasm

grdpwasm 一个基于Web的RDP客户端，使用Go WebAssembly和grdp构建。直接从浏览器连接到Windows远程桌面服务器——无需插件。 架构 Browser WASM ──WebSocket──► proxy Go ──TCP──► RDP Server 因为浏览器无法打开原始TCP套接字，一个轻量级的Go代理服务器将浏览器的WebSocket连接桥接到RDP服务器的TCP端口。 要求 Go 1.24 或更高版本 一个可访问的RDP服务器（Windows或任何兼容RDP的主机） 构建 git clone...

cve-2019-1108

CVE-2019-1108 Explotación CVE-2019-1108 Remote Desktop Protocol Client Information Disclosure Vulnerability Published: 07/09/2019 | Last Updated : 11/19/2019 MITRE CVE-2019-1108 An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its...

evilrdp

🚩 赞助者 如果你喜欢这个项目，请考虑在 GitHub 上赞助它！赞助者 EVILRDP - 更强大的 RDP 控制 它是 aardwolfgui 的邪恶双胞胎，使用 aardwolf RDP 客户端库，为您提供对目标的扩展控制以及从命令行进行额外脚本编写的能力。 功能 从命令行以自动化方式控制鼠标和键盘 从命令行以自动化方式控制剪贴板 从客户端生成一个 SOCKS 代理，通过 RDP 将网络通信通道传输到目标 在目标上执行任意 SHELL 和 PowerShell 命令，无需上传文件 即使在目标上禁用了文件传输，也支持上传和下载文件 脚本 evilrdp - GUI + 命令行 RDP...

aardwolf

🚩 Patrocinadores Si te gusta este proyecto, considera adquirir licencias de OctoPwn, nuestro conjunto completo de herramientas de pentesting que se ejecuta en tu navegador! Para notificaciones sobre nuevas compilaciones/lanzamientos y otra información, únete a nuestro Discord AARDWOLF - Cliente...

loki

loki Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Dave Spencer, david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Loki Publicado bajo AGPL, consulte LICENSE para más información Descripción Loki Limitado Obstructivo Imitador de...

Vulnerability of the avc444_ensure_buffer() function in the libfreerdp/codec/h264.c file of the RDP client FreeRDP, allowing a intruder to execute arbitrary code

The vulnerability of the avc444ensurebuffer function in the libfreerdp/codec/h264.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2026-91961

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can send a Universal Serial Bus USB Redirection for Remote Desktop Connection URBDRC control-transfer request with an invalid OutputBufferSize. This can trigger an assertion in the client process, leading to a denial of...

CVE-2026-91964

FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in negosendnegotiationrequest when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written...

DEBIAN-CVE-2026-91961

FreeRDP before 3.31.0 contains a denial-of-service vulnerability in the URBDRC control-transfer request path that fails to validate OutputBufferSize before forwarding to the libusb backend. A malicious RDP server can send a control-transfer request with OutputBufferSize set to 65536, triggering a...

DEBIAN-CVE-2026-91954

FreeRDP before 3.31.0 contains a null pointer dereference vulnerability in gdisurfacebits when processing Surface Bits commands with NSCodec codec ID. A malicious RDP server can crash a FreeRDP client by sending a crafted Surface Bits command claiming to use NSCodec, even when the codec is disabl...

CVE-2026-91964 FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken

FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in negosendnegotiationrequest when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written...

CVE-2026-91964 FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken

FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in negosendnegotiationrequest when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written...

CVE-2026-91954 FreeRDP before 3.31.0 NULL Pointer Dereference via NSCodec

FreeRDP before 3.31.0 contains a null pointer dereference vulnerability in gdisurfacebits when processing Surface Bits commands with NSCodec codec ID. A malicious RDP server can crash a FreeRDP client by sending a crafted Surface Bits command claiming to use NSCodec, even when the codec is disabl...

CVE-2026-91952 FreeRDP before 3.31.0 Denial of Service via pool_decode_rect

FreeRDP versions before 3.31.0 contain an infinite-loop denial of service in the pooldecoderect function when decoding AVC444 metablocks with more region rectangles than preallocated worker array size. A malicious RDP server can send crafted AVC444 graphics updates causing the threaded decode pat...

EUVD-2026-78802

FreeRDP versions before 3.31.0 contain an out-of-bounds read vulnerability in smartcard response decoders that fail to validate ATR length fields against fixed inline arrays. Authenticated RDP clients can send oversized ATR lengths in PAKIDCOREDEVICEIOCOMPLETION responses to trigger reads past...

PT-2026-92075

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An out-of-bounds read occurs in the func get ep desc function within the URBDRC channel. The issue arises because interface arrays are indexed by position rather than by the protocol field...

PT-2026-92083

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description A heap-based buffer overflow occurs in the nego send negotiation request function when processing Server Redirection PDU Protocol Data Unit messages. A malicious RDP server can trigger this issue by...

[SECURITY] Fedora 45 Update: freerdp-3.31.1-1.fc45

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

[SECURITY] Fedora 43 Update: freerdp2-2.11.7-16.fc43

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...