We have prepared this attack in cooperation with Ondra eveek, who has then presented it at Hacker Fest 2018.

If you are a bad guy or your PC is hacked, you can damage the remote server through the RDP.

Therefore, we should not use untrusted PCs to manage servers through RDP (see Network Security: Tier Model and PAW ).

Few, however, know that with the correct setting of the RDP client, there may be a mutual risk.

This will allow the remote RDP server to access client resources.

Redirection of local disks is especially popular so that the user can access data on hisher PCNB on a remote server.

The RDP client itself displays a warning message This remote connection could damage your local or remote computer.

I just found that most people ignore the warning (underestimate it).

Therefore, I want to point out the degree of seriousness and simplicity of abuse.

But before that I want to point out some interesting features of the attack.

At best, only corporate IT departments, or worse, everyone who hacked it, have the opportunity to access employee private data.

Thus, the customer has the opportunity to access the data of the outsourcer (and to also gain access to other customers ie their competitors).

I would be interested in knowing how is the RDP used by IT providers of our customers using RDP servers of the customer.

But the joke is going to that they are going to be the ones hacked.

Also, disable sharing of other devices (audio, clipboard, printer, plug play).

We have disabled the redirection of most local resources globally in our RDM manager (see password management ).

How To Hack Rdp Connection