rdp-sec-check is a Perl utility for unauthenticated enumeration of an RDP service’s supported security protocols (RDP, TLS, and CredSSP/NLA), native RDP encryption methods and level, and potential configuration issues such as weak encryption, NLA not being required, or FIPS encryption being supported but not mandated. It probes supplied RDP hostnames or IPv4 endpoints (default TCP port 3389; host:port and target-file modes are supported) and reports negotiation responses; it does not create an interactive remote desktop session or validate user credentials.
Perl
RESTRICTED_ACCESS_BLUR_MARKER