NetExec icon indicating copy to clipboard operation
NetExec copied to clipboard

RDP connection issue

Open illmob opened this issue 5 months ago • 1 comments

Describe the bug netexec reports return data NoneType although Remote Desktop Connection fails with error code 0x904 / 0x7, showing “This computer can’t connect to the remote computer.”

To Reproduce Steps to reproduce the behavior i.e.: Command: netexec rdp -u username -p password Resulted in:

(encoded_data must be a byte string, not NoneType)

Expected behavior valid connection

Screenshots

Image

NetExec info

  • OS: Kali
  • Version of nxc: 1.4.0 - SmoothOperator - 8af4bfa6 - 816
  • Installed from: pipx

Additional context Target was Windows7 Sp1. There’s no official MS-RDPBCGR mapping for 0x904/0x7. CredSSP wraps GSSAPI (NTLM or Kerberos) authentication inside the TLS channel. Netexec would need to support the [MS-CREDSPEC / MS-CREDSSP] protocol to do the auth exchange.

illmob avatar Aug 19 '25 16:08 illmob

Thanks for the bug report!

NetExec uses aardwolf under the hood to establish the RDP connection. I think aardwolf supports CredSSP, but i have very limited knowledge on how this actually works under the hood. But perhaps this is solved with a settings change.

NeffIsBack avatar Aug 19 '25 23:08 NeffIsBack