CVE-2024-38077 PoC — Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Source

https://github.com/murphysecurity/RDL-detect

Associated Vulnerability

Title: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability (CVE-2024-38077)
Description:Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Description

远程探测 remote desktop licensing 服务开放情况，用于 CVE-2024-38077 漏洞快速排查

Readme

# Remote Desktop Licensing 服务排查 
参考https://github.com/fortra/impacket/blob/master/examples/rpcdump.py

通过MSRPC枚举开放服务，根据UUID: 3d267954-eeb7-11d1-b94e-00c04fa3080d判断是否包含Terminal Server Licensing 

用法：`python3 rdl-detect.py 目标IP`

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →