Medusa Parallel Network Login Auditor :: RDP

The RDP module tests accounts against the Microsoft Remote Desktop Protocol (RDP) / Terminal Service. It should be noted that will only work with target systems running Microsoft 2008 and later. Tests against Microsoft XP/2003/etc, will always report that the logon was successful.

This module requires FreeRDP. The pass-the-hash option is also only available if FreeRDP version 1.2 or greater is installed.

The following examples demonstrate several uses of the RDP module:

• Logon attempt using pass-the-hash (NTLM):

  
  medusa -M rdp -m PASS:HASH -h 10.10.10.10 -u Administrator -p 31D78236327B9619B14ED8EC9AB454C1
  

• Logon attempt supplying domain name (default behavior is a local logon):

  
  medusa -M rdp -m DOMAIN:CORPNAME -h 10.10.10.10 -u Administrator -p Password1