Hello,
I am investigating how to block specific attacks on a Windows 7 system, one possibility I'm attempting to test is in which an attacker could use a known username and password to create a Meterpreter shell on the target, when all other exploit methods fail and not using remote desktop itself as it would be easily noticeable.
I have searched on the internet for some way to get a Meterpreter shell on a target Windows 7 machine in which the password and username is known.
It seems all google results show the opposite: Using Meterpreter to enable RDP.
The target VM I have set up has remote desktop enabled and the username and password is known.
I can rdesktop to the target fine using the username and password. But I am unaware of a tool or a exploit which works through remote desktop to create a Meterpreter shell.
Thanks,
Wully
