search

SySS-Research / Seth

Perform a MitM attack and extract clear text credentials from RDP connections
MIT License
1.38k stars 325 forks source link

Trim .ms-wbt-server suffix when getting original address from tcpdump #54

Closed exploide closed 2 years ago

exploide commented 2 years ago

When running Seth for the first time, I got weird errors. It turns out, on my system tcpdump shows the destination address as 192.0.2.1.ms-wbt-server. So I patched the sed call that trims such suffixes.