🐧From Linux

You can use Impacket’sĀ rdp_checkĀ to see if you have RDP access, then use Kali’sĀ rdesktopĀ to connect:

rdp_check.py <NETBIOS-DOMAIN>/<user>:<password>@<IP>
xfreerdp /bpp:32 /gfx +aero +fonts /cert-ignore /d:<DOMAIN> /u:<user> /p:<password> /v:<IP> 

Connect RDP with drive share

Connect to a Windows machine using RDP using a share.

<aside> āš ļø

Before connect using this method create the directory on Linux /home/kali/Downloads/<directory_name> to use as mount point of share!

</aside>

xfreerdp /u:<user> /p:"<password>" /w:1920 /h:1080 /v:<IP> /drive:Shared,/home/kali/Downloads/<directory_name>

Connect to VNC Server

xtightvncviewer <HOST>:<PORT>

:microsoft-windows: From Windows

Bypass Credential Manager/Restricted Admin Mode

On hardened systems, if Credential Guard or Restricted Admin mode is active, the RDP client cannot store or reuse passwords by design. Run:

reg query HKLM\\System\\CurrentControlSet\\Control\\Lsa /v LsaCfgFlags

image.png

Bypass using GUI

Open Credential Manager from CLI or search it in Control Panel: