Next we will search for the exploit we are looking for, in our case, Bluekeep. Firstly, we will need to open up Metasploit. So let’s see the results of the scan.Īs we can see, our Windows7 box does indeed use port 3389. The command above will scan, looking specifically to see if port 3389 is in use, we can see the the -p flag denotes the port. All we will need is the IP of the Windows7 machine. For this we will use nmap and specify port 3389 in our scan. RDP runs on port 3389 TCP, so first we will need to see if the device we are attacking uses this protocol. So let’s open up a command prompt and get started. An open source version is available, as well.īut RDP has a vulnerability on Windows7, so we will be demonstrating that today.

RDP is available for most versions of the Windows operating system.

RDP allows network administrators to remotely diagnose and resolve problems individual subscribers encounter. Remote desktop protocol (RDP) is a secure network communications protocol designed for remote management, as well as for remote access to virtual desktops, applications and an RDP terminal server.

3389 windows terminal services exploit