RDP:
Exploitation
RDP exploitation via brute force, Pass-the-Hash, and RCE CVEs
3 guides
•
2 steps
•
Updated Mar 29, 2026
RDP Brute Force and Password Spraying
Exploit RDP with brute force and password spraying techniques, targeting exposed 3389/TCP services to gain unauthorised access via credential attacks.
RDP Pass-the-Hash – GUI Session from an NT Hash
Leverage NT hashes for RDP authentication using Restricted Admin mode, bypassing plaintext credential requirements via pass-the-hash techniques with xfreerdp or Mimikatz.
2 steps