2111 matches found
pyrdp
PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...
MS_T120
MST120 CVE-2019-0708 make the poc step by step, day by day https://docs.microsoft.com/en-us/openspecs/windowsprotocols/ms-rdpbcgr/5073f4ed-1e93-45e1-b039-6e30c385867c...
WindowsProtocolTestSuites
Windows Protocol Test Suites Windows Protocol Test Suites provide interoperability testing against the implementation of Windows open specifications including File Services, Identity Management, Remote Desktop and etc. Originally developed for in-house testing of the Microsoft Open Specifications...
doublepulsar-detection-script
Author: Luke Jennings [email protected] - @jukelennings Company: Countercept @countercept Website: https://countercept.com A set of python2 scripts for sweeping a list of IPs for the presence of both SMB and RDP versions of the DOUBLEPULSAR implant that was released by the Shadow Brokers...
Remote-Desktop-Caching-
Remote-Desktop-Caching- This tool allows one to recover old RDP mstsc session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG...
cve-2019-1108
CVE-2019-1108 Exploitation root@kitploit: CVE-2019-1108 Remote Desktop Protocol Client Information Disclosure Vulnerability Published: 07/09/2019 | Last Updated : 11/19/2019 MITRE CVE-2019-1108 An information disclosure vulnerability exists when the Windows RDP client improperly discloses the...
jumpserver
An open-source PAM platform Bastion Host English · 中文简体 · 中文繁體 · 日本語 · Português Brasil · Español · Русский · 한국어 What is JumpServer? JumpServer is an open-source Privileged Access Management PAM platform that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes,...
CVE-2019-0708
RDP Proof of Concept This is the proof of concept source code for CVE-2019-0708...
RDPassSpray
RDPassSpray RDPassSpary is a python tool to perform password spray attack in a Microsoft domain environment. ALWAYS VERIFY THE LOCKOUT POLICY TO PREVENT LOCKING USERS. How to use it First, install the needed dependencies: root@kitploit: pip3 install -r requirements.txt Second, make sure you have...
rdesktop
IMPORTANTE: rdesktop ya no recibe mantenimiento Por favor, tenga en cuenta que este proyecto ya no recibe mantenimiento y no ha recibido parches en muchos años. Se han reportado vulnerabilidades de seguridad, pero estas no han sido revisadas. Úselo con precaución y bajo su propio riesgo. rdesktop...
CVE-2019-0708-generate-hosts
CVE-2019-0708-generate-hosts This program uses nmap to scan the CIDR addresses listed in the 3389cidrs file one per line and generates a 3389hosts file containing IP addresses of machines that are likely Windows machines with RDP 3389 enabled. This can significantly reduce the number of IPs that...
nlahoney
NLA Honeypot Associated Research FreeRDP-ResearchServer/: a modified FreeRDP 2.2.0 that completes a RDP handshake, kicks out the user since there are no accounts set up, and dumps the six messages into /tmp FreeRDP-Pot-Patches/: patches for FreeRDP server which is intended for production that...
PeekABoo
PeekABoo PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. The tool only works if WinRM is enabled. Since Windows Server 2012 WinRM is enabled by default on all Window...
chameleon
19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...
RdpCacheStitcher
RdpCacheStitcher RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps. Using raw RDP cache tile bitmaps extracted by tools like e.g. ANSSI's BMC-Tools https://github.com/ANSSI-FR/bmc-tools as input, it provides a graphical user...
sticky_keys_hunter
Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...
CVE-2019-0708-Msf--
CVE-2019-0708 PoC de escáner no autenticado CVE-2019-0708 "BlueKeep" por @JaGoTu y @zerosum0x0. Detalles técnicos: https://zerosum0x0.blogspot.com/2019/05/avoiding-dos-how-bluekeep-scanners-work.html Módulo de Metasploit El módulo de Metasploit ha sido incorporado a rapid7:master. msf5 use...
Check-vuln-CVE-2019-0708
CVE-2019-0708 Unauthenticated CVE-2019-0708 "BlueKeep" Scanner PoC by @JaGoTu and @zerosum0x0. Metasploit module PR: https://github.com/rapid7/metasploit-framework/pull/11869 In this repo A scanner fork of rdesktop that can detect if a host is vulnerable to CVE-2019-0708 Microsoft Windows Remote...
CVE-2019-0708
CVE-2019-0708 - BlueKeep RDP RDP Connection Sequence: https://docs.microsoft.com/en-us/openspecs/windowsprotocols/ms-rdpbcgr/023f1e69-cfe8-4ee6-9ee0-7e759fb4e4ee Analysis of RDP Service Vulnerability:...