rdp_check.py
Test RDP authentication credentials
TLDR
SYNOPSIS
rdp_check.py [-h] [-hashes LMHASH:NTHASH] [-6] [-debug] target
DESCRIPTION
rdp_check.py is an Impacket tool that tests whether credentials are valid against a Windows host via RDP (Remote Desktop Protocol). It implements portions of MS-RDPBCGR and MS-CREDSSP to perform CredSSP authentication.The tool is useful for validating credentials during authorized security assessments, verifying RDP access, and testing pass-the-hash attacks against RDP-enabled systems.It performs authentication only and does not establish a full RDP session. Successful authentication indicates the credentials are valid, but does not guarantee interactive desktop access (which may be restricted by group policy or user rights).
PARAMETERS
target
Target specification: [[domain/]username[:password]@]<hostname or IP>-hashes LMHASH:NTHASH
Authenticate using NTLM hashes instead of password-6, --ipv6
Connect using IPv6-debug
Enable debug output-ts
Add timestamps to log output-h, --help
Show help message
CAVEATS
Authorization required: Only use this tool against systems you have explicit permission to test. Unauthorized access attempts are illegal.The tool does not complete a full RDP handshake, so successful authentication does not guarantee GUI access. Network Level Authentication (NLA) settings and user rights assignments may still prevent actual login.Pass-the-hash attacks (-hashes) require the target to accept NTLM authentication. Modern configurations may restrict NTLM in favor of Kerberos.Impacket tools require Python and the impacket library. Install via pip install impacket or use Kali Linux which includes impacket-scripts.
SEE ALSO
xfreerdp(1), rdesktop(1), nmap(1), crackmapexec(1)
