# Medusa Parallel Network Login Auditor :: RDP

JoMo-Kun / jmk "AT" foofus "DOT" net

The RDP module tests accounts against the Microsoft Remote Desktop Protocol (RDP) / Terminal Service. It should be noted that will only work with target systems running Microsoft 2008 and later. Tests against Microsoft XP/2003/etc, will always report that the logon was successful.

This module requires FreeRDP. The pass-the-hash option is also only available if FreeRDP version 1.2 or greater is installed.

Pre-built binaries of the FreeRDP master branch are available at https://ci.freerdp.com. Builds are available for Ubuntu, Debian, Fedora, and OpenSUSE. The nightly builds are installed into /opt/freerdp-nightly and can be installed in parallel with the distribution's regular freerdp package. If Medusa detected this version during its build process, it should have built against it over any other installed version of FreeRDP.

For example, the following worked for Kali 2.0 on 2015/11/04:
- Visit: https://ci.freerdp.com/job/freerdp-nightly-binaries/architecture=amd64,distribution=jessie,label=pkg-deb/
- Download: freerdp-nightly_1.2.1+0~20151104024829.185~1.gbpb83356_amd64.deb
- Download: freerdp-nightly-dev_1.2.1+0~20151104024829.185~1.gbpb83356_amd64.deb
- Install: dpkg -i freerdp-nightly*
- Update run time path: echo /opt/freerdp-nightly/lib/ >> /etc/ld.so.conf; ldconfig - Build Medusa: ./configure;make

The following examples demonstrate several uses of the RDP module:

- Logon attempt using pass-the-hash (NTLM):

      medusa -M rdp -m PASS:HASH -h 10.10.10.10 -u Administrator -p 31D78236327B9619B14ED8EC9AB454C1

- Logon attempt supplying domain name (default behavior is a local logon):

      medusa -M rdp -m DOMAIN:CORPNAME -h 10.10.10.10 -u Administrator -p Password1

Medusa Documentation