Join Our Live Cybersecurity Training on January 21st - Don't Miss Out!

Abstract of the Training

PyRDP is a Remote Desktop Protocol (RDP) monster-in-the-middle (MITM) tool and library useful in intrusion testing, and protocol and malware research. It’s a powerful tool that gathers information about adversaries. By wielding the tool well, you’ll be surprised to see what RDP can reveal.

As a research tool, PyRDP can: 

• Be used as part of a fully interactive honeypot 
• Be placed in front of a Windows RDP server to intercept malicious sessions 
• Replace the credentials provided in the connection sequence with working credentials to accelerate compromise and malicious behavior collection 
• Save a visual and textual recording of each RDP session, which is useful for investigation or to generate IOCs 
• Save a copy of the files that are transferred via the drive redirection feature, allowing it to collect malicious payloads. 
  

This workshop covers most of PyRDP’s capabilities in a hands-on manner. However, due to the intricate setup required involving multiple interconnected virtual machines, the workshop will consist mostly of demos. Attendees will have a thorough understanding of RDP interception with PyRDP after the workshop.

Meet Your Instructor

Level of Knowledge Required to Participate

 Who is it For?