EIP-2026-119088
PRE-CVERemote Desktop Web Access - Authentication Timing Attack (Metasploit Module)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-119088. PoCs published by Matthew Dunn.
AI-analyzed exploit summary This script is a Metasploit module designed to enumerate valid usernames and passwords against a Microsoft RDP Web Client by performing timing-based checks during authentication attempts. It includes functionality to verify service availability and automatically enumerate the Active Directory domain using NTLM challenges.
Description
Remote Desktop Web Access - Authentication Timing Attack (Metasploit Module)
Exploits (1)
This script is a Metasploit module designed to enumerate valid usernames and passwords against a Microsoft RDP Web Client by performing timing-based checks during authentication attempts. It includes functionality to verify service availability and automatically enumerate the Active Directory domain using NTLM challenges.