GitHub - nunofernandes/rdps2rdp: Decrypt MITM SSL RDP and save to pcap

nunofernandes / rdps2rdp Public

forked from DiabloHorn/rdps2rdp

Notifications You must be signed in to change notification settings
Fork 0
Star 0

Decrypt MITM SSL RDP and save to pcap

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 2 Commits
README		README
cert.key		cert.key
cert.pem		cert.pem
gencert.sh		gencert.sh
rdps2rdp_pcap.py		rdps2rdp_pcap.py

Repository files navigation

Quick POC to MITM RDP SSL - http://diablohorn.wordpress.com
Inspired by: https://labs.portcullis.co.uk/blog/ssl-man-in-the-middle-attacks-on-rdp/

When a client connects it will be presented with a fake cert and all the plain text data
will be saved to a pcap. You can then use the pcap to extract key strokes or to replay the
session if you have the appropiate tools for it.