Medusa Parallel Network Login Auditor :: RDP

The RDP module tests accounts against the Microsoft Remote Desktop Protocol (RDP) / Terminal Service. It should be noted that will only work with target systems running Microsoft 2008 and later. Tests against Microsoft XP/2003/etc, will always report that the logon was successful.

This module requires FreeRDP (version 3). For pass-the-hash support, FreeRDP version 3.11.1 (or later) must be used.

The following examples demonstrate several uses of the RDP module:

• Logon attempt using pass-the-hash (NTLM):

  
  medusa -M rdp -m PASS:HASH -h 10.10.10.10 -u Administrator -p 31D78236327B9619B14ED8EC9AB454C1
  

• Logon attempt supplying domain name (default behavior is a local logon):

  
  medusa -M rdp -m DOMAIN:CORPNAME -h 10.10.10.10 -u Administrator -p Password1