impacket-rdp_check

impacket-rdp_check [-h] [-hashes LMHASH:NTHASH] target

impacket-rdp_check validates whether provided credentials allow RDP (Remote Desktop Protocol) access to a Windows system. It attempts to authenticate via RDP without establishing a full session, making it useful for credential validation during penetration tests.The tool performs the initial RDP handshake and authentication exchange, reporting whether the credentials are accepted by the target system.

-hashes LMHASH:NTHASH

Use NTLM hashes for authentication instead of password

Only validates credentials; does not establish a full RDP session. Network Level Authentication (NLA) settings on the target affect behavior. RDP must be enabled and accessible on the target. May trigger account lockout policies if used repeatedly with incorrect credentials.

Part of the Impacket library by SecureAuth. Useful for validating credentials against RDP services without the overhead of full graphical session establishment.

xfreerdp(1), rdesktop(1), nmap(1)