PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Remote Desktop Services Shadowing – Beyond the Shadowed Session

swarm.ptsecurity.com | research | #pentesting | #windows | #rdp | #lateral-movement
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A pentesting guide to Windows Remote Desktop Services Shadowing: the modern mstsc /shadow capability that lets you view or control another user's RDP session from your own host without third-party tooling, covering requirements and operational caveats.
Published
Collected

Related coverage

research · projectblack.io
A user account restriction (for example, a time-of-day restriction) is preventing you from logging on. For assistance, contact your system administrator or technical support.
Adding accounts to Active Directory's Protected Users group disables NTLM and can block RDP; Project Black shows the fix — use UPN (user@corp.local) with the server's FQDN — and other causes.
research · eshard.com
Lite VM Studio builds your Windows VM, so you don't have to.
Eliminate Windows background noise in Time Travel Debugging. Discover how Lite VM Studio turns weeks of VM customisation into a single prompt for faster, cleaner TTD recordings.
research · specterops.io
Unmasking SCCM Application Execution
A deep dive into why SCCM application execution spawns via WmiPrvSE.exe instead of CcmExec.exe, and how to detect anomalous SCCM deployments.
research · specterops.io
Turning Enterprise Update Servers Into Backdoor Factories (0_o) – Part 1
Part 1 of SpecterOps' WSUS research: coercing a WSUS machine account into a relayed SQL session, then abusing stored procedures to forge malicious updates and target specific computers.
research · calif.io
Dark Elevator (CVE-2026-50343)
# Dark Elevator (CVE-2026-50343) A pure-logic, 100% reliable path from a normal user to SYSTEM. Carlos Roque July 22, 2026 windowsmadbugs Contents 1. The Bugs 2. PoC 3. Disclosure Timeline > No...
research · calif.io
[CVE-2026-41091] RedSun: Exploiting Windows Defender's Remediation Workflow
# RedSun: Exploiting Windows Defender's Remediation Workflow Just showing some appreciation for Nightmare-Eclipse's excellent work. Hopefully this won't get us banned! Carlos Roque June 1, 2026...
Back