Skip to content

Conversation

@Seanstoppable
Copy link
Contributor

Adds a module for RDP

At least a starting point for #17

Copy link
Contributor

@phillip-stephens phillip-stephens left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is great, really appreciate this effort to get this functionality added.
I haven't fully dug into this, but I'm wondering if there's a non-secure mode that can be used as well. I added a dockerized RDP service (TEST_MODULES=rdp make integration-test) on local port 3389 (username = username, pwd = password) which works through the Microsoft RDP app but not with the scanner. I tried just a simple toggle off of TLS but looks like something deeper is going on.

I can circle back to this as I get some free time, but I think this would be good to add support for since we may be most interested in such un-secured RDP services.

}

type RDPResult struct {
OSVersion string `json:"os_version,omitempty"`
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I believe this is the RDP Version based on testing a couple known public IPs

Suggested change
OSVersion string `json:"os_version,omitempty"`
RDPVersion string `json:"rdp_version,omitempty"`

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is actually os_version.
Example:
10.0.17763 is:
https://learn.microsoft.com/en-us/windows/uwp/whats-new/windows-10-build-17763

@Seanstoppable
Copy link
Contributor Author

This is great, really appreciate this effort to get this functionality added. I haven't fully dug into this, but I'm wondering if there's a non-secure mode that can be used as well. I added a dockerized RDP service (TEST_MODULES=rdp make integration-test) on local port 3389 (username = username, pwd = password) which works through the Microsoft RDP app but not with the scanner. I tried just a simple toggle off of TLS but looks like something deeper is going on.

I can circle back to this as I get some free time, but I think this would be good to add support for since we may be most interested in such un-secured RDP services.

Interesting, I'll try to poke at it this week too

@Seanstoppable
Copy link
Contributor Author

So, because I am using NTLM to get version information, this doesn't work for xrdp.
Let me do some research into what more generic detection would be.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants