search

thinkst / opencanary

Modular and decentralised honeypot
http://opencanary.org
BSD 3-Clause "New" or "Revised" License
2.21k stars 353 forks source link

Feature Request: RDP full authentication flow #305

Closed alopezme closed 10 months ago

alopezme commented 10 months ago

I am testing the rdp module with different usernames. But in all the alerts I get the first username entered even if I cahnge it...

I would like also to grab the password if possible.

quinn-thinkst commented 10 months ago

Hi @alopezme,

Thanks for writing in. Unfortunately, this is currently a limitation of the lightweight implementation of the RDP service. As it doesn't perform a full authentication negotiation, it doesn't have easy access to all of the user supplied data. Instead, it relies on a cookie to retrieve the username - which is why you see repeating values even after changing your input.

At this time we don't have an immediate fix for the issue, but we've raised it internally for further feature dev.

Thanks again for raising this, and please do let us know if there's anything else we can help you with.