https://github.com/kost/rdpcmd
script/execute commands over RDP connection (elevated cmd.exe)
https://github.com/kost/rdpcmd
Last synced: about 1 month ago
JSON representation
script/execute commands over RDP connection (elevated cmd.exe)
- Host: GitHub
- URL: https://github.com/kost/rdpcmd
- Owner: kost
- License: mit
- Created: 2018-11-17T13:33:50.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2018-11-18T08:34:30.000Z (over 6 years ago)
- Last Synced: 2025-03-26T04:42:39.249Z (about 2 months ago)
- Language: AutoIt
- Homepage:
- Size: 5.86 KB
- Stars: 41
- Watchers: 6
- Forks: 13
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# rdpcmd
Execute and script commands over RDP connection. It will try to execute command in elevated cmd.exeSince there were no examples of how you can use AutoIt to control RDP sessions and also spawn elevated cmd.exe, I wrote one.
## Installation
You need to import registry file in order to disable confirmation RDP prompts (faster and safer):
`
reg import disable-confirmations.reg
`Note: You need only to run this on host where you will rdpcmd from. You do not have to do it on the hosts you're connecting. Be aware also that rdpcmd will not work if you do not disable confirmations.
Warning: Disabling confirmations have its security implications. That means you will not get confirmation for new/invalid security certificates when connecting with RDP (Only affects RDP!).
## Usage
Simple usage:
`
rdpcmd
`## Examples
Run ipconfig, do not close command prompt (you will need to reconnect to RDP to see the output):
`
rdpcmd 192.168.1.1 user password "ipconfig" 0
`Enable winrm, close command prompt after 5000 ms (5 s):
`
rdpcmd 192.168.1.1 user password "winrm quickconfig -quiet -force" 5000
`## Known Limitations
Since it is Proof of Concept (PoC), it have some limitations (pull requests are welcome!):
* Does not handle errors well (connection failure, wrong credentials, etc)
* Works best if you don't have anything else open (especially other RDP sessions)
* Will not report if it fails
* You have to play with timeouts/sleeps if you have slow network or host targets