RDP connection issue
Describe the bug netexec reports return data NoneType although Remote Desktop Connection fails with error code 0x904 / 0x7, showing “This computer can’t connect to the remote computer.”
To Reproduce
Steps to reproduce the behavior i.e.:
Command: netexec rdp -u username -p password
Resulted in:
(encoded_data must be a byte string, not NoneType)
Expected behavior valid connection
Screenshots
NetExec info
- OS: Kali
- Version of nxc: 1.4.0 - SmoothOperator - 8af4bfa6 - 816
- Installed from: pipx
Additional context Target was Windows7 Sp1. There’s no official MS-RDPBCGR mapping for 0x904/0x7. CredSSP wraps GSSAPI (NTLM or Kerberos) authentication inside the TLS channel. Netexec would need to support the [MS-CREDSPEC / MS-CREDSSP] protocol to do the auth exchange.
Thanks for the bug report!
NetExec uses aardwolf under the hood to establish the RDP connection. I think aardwolf supports CredSSP, but i have very limited knowledge on how this actually works under the hood. But perhaps this is solved with a settings change.