ica2tcp

Ica2Tcp 소개 Ica2Tcp는 C로 개발된 도구로, Citrix ICA 연결 내부에서 모든 TCP 연결을 프록시할 수 있게 해줍니다. 이는 Citrix에 있어 SSH에서의 ssh -D와 같은 역할을 합니다. 추가 정보는 여기에서 확인할 수 있습니다: https://www.sstic.org/2022/presentation/ica2tcp/ 면책 조항 이 도구는 인턴십 프로젝트로 개발되었으며 아직 개발 중입니다. "있는 그대로" 게시되므로 코드의 일부는 아직 약간 지저분합니다. 따라서 가끔 충돌이 발생할 수 있습니다. 더 깔끔...

UniversalDVC

원격 데스크톱 서비스RDS용 유니버설 동적 가상 채널 커넥터UDVC 터미널 서비스또는 원격 데스크톱 서비스는 더 깊이 파고들고자 하는 사람들에게 많은 숨겨진 기능을 제공합니다. 이러한 서비스 중 하나가 동적 가상 채널Dynamic Virtual Channel로, 방화벽에 새 소켓, 연결 또는 포트를 열지 않고도 열린 RDP 연결을 통해 통신할 수 있게 해줍니다. 이 채널은 활성 네트워크 장치로부터 데이터를 숨기거나, 방화벽을 우회하거나, 네트워크를 통해 디바이스 드라이버를 구현하거나, 침투 테스터가 데이터를 전송하는 데 도움을...

SocksOverRDP

Socks Over RDP / Socks Over Citrix 이 도구는 터미널 서비스또는 원격 데스크톱 서비스 및 CitrixXenApp/XenDesktop에 SOCKS 프록시 기능을 추가합니다. 동적 가상 채널Dynamic Virtual Channel을 사용하여 방화벽에 새 소켓, 연결 또는 포트를 열지 않고도 열린 RDP/Citrix 연결을 통해 통신할 수 있습니다. 어떻게 사용할 수 있나요? RDP/Citrix 서버에 연결할 때 사용하는 클라이언트 컴퓨터에 플러그인.dll을 설치해야 합니다. RDP/Citrix 서버에서...

Fenrir

Fenrir NCC Group Plc가 오픈 소스로 공개함 - http://www.nccgroup.com/ Dave Spencer, david dot spencer at nccgroup dot com 개발 http://www.github.com/nccgroup/Fenrir AGPL에 따라 공개됨, 자세한 내용은 LICENSE 참조 설명 Fenrir는 RDP 가상 채널을 통해 네트워크 트래픽을 터널링하는 것이 가능하다는 것을 입증하기 위해 만들어졌지만, 아직 초기 단계에 불과합니다. 이 PoC는 meterpreter revers...

CVE-2026-7070-RDP-Clipboard-Hijacking-via-Virtual-Channel-Injection

CVE-2026-7070 – RDP 클립보드 하이재킹 Virtual Channel Injection 프로그램 코드 Python – 시뮬레이션된 RDP 클립보드 rdpserversim.py - Simulated RDP server with trusted virtual channel from http.server import HTTPServer, BaseHTTPRequestHandler import json, threading clipboard = "" Simulate an RDP virtual channel that any...

DEBIAN-CVE-2026-91948

FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in server-side static virtual channel handling when CHANNELOPTIONSHOWPROTOCOL is enabled. Authenticated clients can queue oversized channel messages that cause buffer underflow and corrupt heap memory including live...

CVE-2026-91948

FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in server-side static virtual channel handling when CHANNELOPTIONSHOWPROTOCOL is enabled. Authenticated clients can queue oversized channel messages that cause buffer underflow and corrupt heap memory including live...

CVE-2026-91948 FreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOL

FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in server-side static virtual channel handling when CHANNELOPTIONSHOWPROTOCOL is enabled. Authenticated clients can queue oversized channel messages that cause buffer underflow and corrupt heap memory including live...

CVE-2026-91948 FreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOL

FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in server-side static virtual channel handling when CHANNELOPTIONSHOWPROTOCOL is enabled. Authenticated clients can queue oversized channel messages that cause buffer underflow and corrupt heap memory including live...

CVE-2026-91948

FreeRDP versions before 3.31.0 are affected by an out-of-bounds write in the server-side static virtual channel handling when CHANNEL_OPTION_SHOW_PROTOCOL is enabled. An authenticated client can queue oversized channel messages, causing a buffer underflow that corrupts heap memory including live ...

CVE-2026-91948 FreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOL

FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in server-side static virtual channel handling when CHANNELOPTIONSHOWPROTOCOL is enabled. Authenticated clients can queue oversized channel messages that cause buffer underflow and corrupt heap memory including live...

PT-2026-92067

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An out-of-bounds write issue exists in server-side static virtual channel handling when CHANNEL OPTION SHOW PROTOCOL is enabled. Authenticated clients can queue oversized channel messages, leading t...

Linux Distros Unpatched Vulnerability : CVE-2026-91948

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in server-side static virtual channel handling when CHANNELOPTIONSHOWPROTOCOL is...

Astra Linux – Vulnerability in freerdp3

FreeRDP before version 3.22.0 contains a use-after-free vulnerability in the dvcmanchannelclose and dvcmancallonreceive functions, due to improper synchronization of channel callback access. A malicious RDP server can trigger a race condition by sending DYNVCDATA and DYNVCCLOSE messages...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: atm: idt77252: prevent use after free in dequeuerx We cannot dereference “skb” after calling vcc-push, because the skb is released...

CVE-2026-67305: Heap-based Buffer Overflow

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...

SUSE CVE-2026-44178

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within the virtual channel forwarding mechanism. When forwarding data from a remote client to the internal channel server, the xrdp process utilizes a fixed-size buffer without adequate...

CVE-2026-44178

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within the virtual channel forwarding mechanism. When forwarding data from a remote client to the internal channel server, the xrdp process utilizes a fixed-size buffer without adequate...

EUVD-2026-46028

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within the virtual channel forwarding mechanism. When forwarding data from a remote client to the internal channel server, the xrdp process utilizes a fixed-size buffer without adequate...

CVE-2026-44178

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within the virtual channel forwarding mechanism. When forwarding data from a remote client to the internal channel server, the xrdp process utilizes a fixed-size buffer without adequate...