{"id":4739,"date":"2017-11-21T02:05:46","date_gmt":"2017-11-20T18:05:46","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=4739"},"modified":"2017-11-21T02:06:07","modified_gmt":"2017-11-20T18:06:07","slug":"rdpy-rdp-security-tool-hacking-remote-desktop-protocol","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2017\/11\/rdpy-rdp-security-tool-hacking-remote-desktop-protocol\/","title":{"rendered":"RDPY &#8211; RDP Security Tool For Hacking Remote Desktop Protocol"},"content":{"rendered":"<p>RDPY is an RDP Security Tool in Twisted Python with RDP Man in the Middle proxy support which can record sessions and Honeypot functionality.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2017\/11\/RDPY-RDP-Security-Tool-For-Hacking-Remote-Desktop-Protocol-640x390.png\" alt=\"RDPY - RDP Security Tool For Hacking Remote Desktop Protocol\" width=\"640\" height=\"390\" class=\"aligncenter size-medium wp-image-4899\" srcset=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2017\/11\/RDPY-RDP-Security-Tool-For-Hacking-Remote-Desktop-Protocol-640x390.png 640w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2017\/11\/RDPY-RDP-Security-Tool-For-Hacking-Remote-Desktop-Protocol-1024x624.png 1024w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2017\/11\/RDPY-RDP-Security-Tool-For-Hacking-Remote-Desktop-Protocol.png 1170w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<p>RDPY is a pure Python implementation of the Microsoft RDP (Remote Desktop Protocol) protocol (client and server side). RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA authentication (through ntlmv2 authentication protocol).<\/p>\n<h2>RDPY RDP Security Tool Features<\/h2>\n<p>RDPY provides the following RDP and VNC binaries:<\/p>\n<ul>\n<li>RDP Man In The Middle proxy which record session<\/li>\n<li>RDP Honeypot<\/li>\n<li>RDP Screenshoter<\/li>\n<li>RDP Client<\/li>\n<li>VNC Client<\/li>\n<li>VNC Screenshoter<\/li>\n<li>RSS Player<\/li>\n<\/ul>\n<p>RDPY is fully implemented in python, except the bitmap decompression algorithm which is implemented in C for performance purposes.<\/p>\n<h2>RDPY Hacking RDP Binaries<\/h2>\n<h4>rdpy-rdpclient<\/h4>\n<p>rdpy-rdpclient is a simple RDP Qt4 client.<\/p>\n<pre>$ rdpy-rdpclient.py [-u username] [-p password] [-d domain] [-r rss_ouput_file] [...] XXX.XXX.XXX.XXX[:3389]<\/pre>\n<p>You can use rdpy-rdpclient in a Recorder Session Scenario, used in rdpy-rdphoneypot.<\/p>\n<h4>rdpy-vncclient<\/h4>\n<p>rdpy-vncclient is a simple VNC Qt4 client.<\/p>\n<pre>$ rdpy-vncclient.py [-p password] XXX.XXX.XXX.XXX[:5900]<\/pre>\n<h4>rdpy-rdpscreenshot<\/h4>\n<p>rdpy-rdpscreenshot saves login screen in file.<\/p>\n<pre>$ rdpy-rdpscreenshot.py [-w width] [-l height] [-o output_file_path] XXX.XXX.XXX.XXX[:3389]<\/pre>\n<h4>rdpy-vncscreenshot<\/h4>\n<p>rdpy-vncscreenshot saves the first screen update in file.<\/p>\n<pre>$ rdpy-vncscreenshot.py [-p password] [-o output_file_path] XXX.XXX.XXX.XXX[:5900]<\/pre>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<h4>rdpy-rdpmitm<\/h4>\n<p>rdpy-rdpmitm is a RDP proxy allows you to do a Man In The Middle attack on RDP protocol. Record Session Scenario into rss file which can be replayed by rdpy-rssplayer.<\/p>\n<pre>$ rdpy-rdpmitm.py -o output_dir [-l listen_port] [-k private_key_file_path] [-c certificate_file_path] [-r (for XP or server 2003 client)] target_host[:target_port]<\/pre>\n<p>Output directory is used to save the rss file with following format (YYYYMMDDHHMMSS_ip_index.rss) The private key file and the certificate file are classic cryptographic files for SSL connections. The RDP protocol can negotiate its own security layer If one of both parameters are omitted, the server use standard RDP as security layer.<\/p>\n<h4>rdpy-rdphoneypot<\/h4>\n<p>rdpy-rdphoneypot is an RDP honey Pot. Use Recorded Session Scenario to replay scenario through RDP Protocol.<\/p>\n<pre>$ rdpy-rdphoneypot.py [-l listen_port] [-k private_key_file_path] [-c certificate_file_path] rss_file_path_1 ... rss_file_path_N<\/pre>\n<p>The private key file and the certificate file are classic cryptographic files for SSL connections. The RDP protocol can negotiate its own security layer. If one of both parameters are omitted, the server use standard RDP as security layer. You can specify more than one files to match more common screen size.<\/p>\n<h4>rdpy-rssplayer<\/h4>\n<p>rdpy-rssplayer is use to replay Record Session Scenario (rss) files generates by either rdpy-rdpmitm or rdpy-rdpclient binaries.<\/p>\n<pre>$ rdpy-rssplayer.py rss_file_path<\/pre>\n<p>There\u2019s also another related tool which can extract RDP sessions:<\/p>\n<p>\u2013 <a href=\"https:\/\/www.darknet.org.uk\/2017\/03\/sessiongopher-session-extraction-tool\/\">SessionGopher \u2013 Session Extraction Tool<\/a><\/p>\n<p>And there is of course <a href=\"https:\/\/www.darknet.org.uk\/2017\/09\/seth-rdp-man-in-the-middle-attack-tool\/\">Seth \u2013 RDP Man In The Middle Attack Tool<\/a>.<\/p>\n<p>You can download RDPY here:<\/p>\n<p><a href=\"https:\/\/github.com\/citronneur\/rdpy\/archive\/v1.3.2.zip\">rdpy-v1.3.2.zip<\/a><\/p>\n<p>Or read more <a href=\"https:\/\/github.com\/citronneur\/rdpy\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>RDPY is an RDP Security Tool in Twisted Python with RDP Man in the Middle proxy support which can record sessions and Honeypot functionality. RDPY is a pure Python implementation of the Microsoft RDP (Remote Desktop Protocol) protocol (client and server side). RDPY is built over the event driven network engine Twisted. RDPY support standard [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"RDPY is an RDP Security Tool in Twisted Python with RDP Man in the Middle proxy support which can record sessions and Honeypot functionality.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[5],"tags":[284,10626,10657],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/4739"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=4739"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/4739\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=4739"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=4739"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=4739"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}