xrdp

KO | EN

gitlite — search

#ai #typescript #llm #golang #linux #docker #nodejs #java #awesome #awesome-list #vue #security #openai #open-source

(★ 82)

A rudimentary remote desktop tool for the X11 protocol exploiting unauthenticated x11 sessions

File Explorer

Download Latest Version (.zip)

LICENSE
README.md
xrdp.py

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# X11 Remote Desktop
This is a rudimentary remote desktop tool for the X11 protocol exploiting unauthenticated x11 sessions.

Our approach is to automate the process of using the default X toolset into an easy to use tool for exploiting unauthenticated X11 access. Our tool provides a streamlined method for connecting to an X server in order to send commands and receive output hijacking the remote host. The provided user interface is designed to resemble a remote desktop connection apart from the added user input fields. Before using the tool, a vulnerable host will need to be found using available scanners or using the Nmap script we developed to find vulnerable hosts with currently active displays that can be hijacked.

To help in the scanning process, check out the custom nmap script [here](https://github.com/sensepost/x11-active-displays).

## Requirements:
xwininfo

xwatchwin

xdotool

## Installation:
```
sudo apt-get install xdotool
wget http://old-releases.ubuntu.com/ubuntu/pool/universe/x/xwatchwin/xwatchwin_1.1.1-2_amd64.deb && sudo dpkg -i xwatchwin_1.1.1-2_amd64.deb && sudo apt-get install -f
git clone git@github.com:sensepost/xrdp.git && cd xrdp
```

## Usage:
```
python xrdp.py <IP>:<DP>
python xrdp.py 10.2.10.190:0
python xrdp.py 10.2.10.190:0 --no-disp
```

## Functionality:
--no-disp       = only load the keyboard input fields (do not render display)

spr		= toggle on + type character in entry + press enter key to send

ctrl		= toggle on + type character in entry + press enter key to send

alt		= toggle on + type character in entry + press enter key to send

Enter		= press button to send enter key (alternatively, press enter key in empty text field)

Backspace	= press button to send backspace key

R-Shell		= type ip:port + press button to automatically open terminal and run reverse shell then minimize window

## Authors:
Darryn@SensePost.com

Thomas@SensePost.com

xrdp

File Explorer

Today's picks

Was this content helpful?

Recent Feedback

xrdp

File Explorer

Today's picks

Was this content helpful?

Recent Feedback

Download README