ping @gentilkiwi
Show this thread
Umm- why can I find the password I used to connect to a remote desktop service in cleartext in memory of RDP service? First saw my microsoft accounts pwd- made new local account- same thing. For this user its: wtfmsnotcoolpic.twitter.com/lRMhDCMJkH
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Credential guard is running in secure kernel- I know its not its job to protect against this, but why use it if you leak it to all admin users on RDP server you connect to? No need to pass the hash or whatever...pic.twitter.com/3dJUjpZESN
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
That's what i found as a function responsible.
End of conversation
New conversation -
-
What’s your RDP client version?
- Show replies
New conversation -
-
-
Wow, good catch!
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
This is useful
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Are you using Remote Credential Guard or connecting in Restricted Admin mode?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
What? Since when RDP spawn by svchost?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.