Lateral Movement: Remote Desktop Protocol (RDP)
Course Content
By mastering T1021.001: Remote Services: Remote Desktop Protocol, adversaries can gain unauthorized access to target systems, escalate privileges, and move laterally within compromised networks. They can exploit RDP vulnerabilities and misconfigurations to remotely control systems, access sensitive data, and execute further attacks. By employing various attack methods, such as brute force attacks, credential dumping, and man-in-the-middle attacks, adversaries can compromise RDP services, thereby increasing their foothold within the target network. The exploitation of RDP services also enables threat actors to maintain a persistent presence on the target systems, making it more challenging for security professionals to identify and remediate malicious activities. In summary, the mastery of RDP exploitation techniques significantly bolsters adversaries' capabilities, allowing them to conduct sophisticated cyber operations and maximize the impact of their attacks.
Instructed by
Matt has led multiple Red Team engagements, ranging from a few weeks to a year and covering multiple security domains. Outside of Red Teaming, Matt is also a seasoned penetration tester with interests in: AppSec, OSINT, Hardware, Wifi, Social Engineering, and Physical Security. Matt has a Master's degree in Information Assurance and an exhaustive number of certifications ranging from frameworks, management, and hands-on hacking. Matt is a Technical SME at Cybrary, focusing on Adversarial Emulation and Red Teaming for course content.
Owen is certified in the GIAC GSEC, CompTIA CySA+, and various other vendor-related certifications. He works both as a technical security engineer and as an SME architect instructor in his spare time. Spreading the word of cyber security is a passion of his. Owen lives in Southeast Michigan with his beautiful wife, daughter, and his dog, Thor. In his free time, Owen enjoys watching sports and movies, and spending time with his family.
After too many years of security operations work, Chris Daywalt tries to turn his phone off at 5:00 pm EST. While there are a bunch of training classes and education somewhere on his resume, much of what he has to teach was learned at the school of hard knocks, often at the expense of his previous clients. He wants to help you spend more time detecting and denying adversaries and less time banging your head against your keyboard. He dips his blueberry donuts in orange juice.
Chris’ 19-year career includes work for organizations of all sizes, both government and private sector, and is distributed roughly like so:
Lucas is a seasoned threat researcher in multiple security disciplines, such as real-world adversarial tracking, network vulnerabilities, web exploitation, API abuse, and more. He began his career at the US Department of Defense, where he was trained by some of the world's best operators and analysts. Lucas now operates in the Cybrary red team, emulating real-world threat actors and running purple team exercises. He has 11 industry certifications, including the OSWA, GPEN, GAWN, GCFE, and RHCSA. He is also a member of the GIAC Advisory Board. In his free time, he enjoys working outdoors to improve his farm.
