CVE-2018-0886

This exploit leverages a man-in-the-middle attack against CredSSP to achieve remote code execution by relaying authentication. It requires a modified version of the rdpy library and a custom-generated certificate.

This repository provides a technical writeup and references for CVE-2018-0886, a vulnerability in the Credential Security Support Provider protocol (CredSSP) used in MS-RDP. It includes links to the original research and a PoC repository but does not contain exploit code itself.

This repository contains a proof-of-concept exploit for CVE-2018-0886, which targets a vulnerability in the Credential Security Support Provider protocol (CredSSP) used in Remote Desktop Protocol (RDP). The exploit generates a malicious certificate to achieve remote code execution (RCE) on the target system.

This repository provides a technical writeup and references for CVE-2018-0886, a vulnerability in Microsoft's Credential Security Support Provider protocol (CredSSP). It includes links to the original research and a PoC repository but does not contain direct exploit code.