CVE-2012-0002

This is a proof-of-concept exploit for CVE-2012-0002, targeting a use-after-free vulnerability in Microsoft Terminal Services / Remote Desktop Services. The exploit triggers the vulnerability by sending a malformed T.125 ConnectMCSPDU packet with a maxChannelIds field set to a value less than or equal to 5, potentially leading to remote code execution.

This repository contains a Go-based scanner for CVE-2012-0002, a vulnerability in Microsoft Remote Desktop Protocol (RDP). The code checks for the presence of the vulnerability by sending crafted RDP packets and analyzing responses, without executing a full exploit.

This Metasploit module exploits a use-after-free vulnerability in Microsoft Remote Desktop (RDP) by sending a malformed T.125 ConnectMCSPDU packet with an invalid maxChannelIDs field, causing a denial-of-service (DoS) condition.

This Metasploit module checks for the MS12-020 vulnerability in Microsoft Remote Desktop Protocol (RDP) by sending crafted packets and analyzing responses. It does not exploit the vulnerability but confirms its presence.