Defending Windows Remote Desktop (RDP) against Hydra Brute Force Attacks - For Educational Use ONLY!
PLEASE NOTE: All information, techniques and tools showcased in these videos are for educational and ethical penetration testing purposes ONLY and is intended for individuals aspiring towards a career in cyber security either as a penetration tester or a network defender/analyst. NEVER attempt to use this information to gain unauthorized access to systems without the EXCPLICIT consent of its owners. This is a punishable offence by law in most countries.
Hey all and welcome back to my channel! In this lab I will show you how to perform a basic Nmap port scan against a Windows 10 host to assess for any open RDP ports. We will then user a popular tool installed on Kali Linux called Hydra, to attack and brute force the username and password of the RDP account on the Windows machine. I will also show you how to setup a lock out security policy on the Windows machine to help prevent these types of brute force attacks, and discuss a few alternative mitigation techniques, such as using a firewall, VPN and strong passwords.
As always, this is for educational purposes ONLY, so please don't try any of these tools or techniques outside of your lab environment, unless you have the explicit permission of the system owner do perform such penetration tests.
I Hope that you enjoy this video, and if you do it would be much appreciated if you like and subscribe!
🔗LINKS🔗
Hydra - https://www.kali.org/tools/hydra/
About RDP - https://en.wikipedia.org/wiki/Remote_...
NMAP - https://nmap.org/
CHAPTERS -
00:00 - Intro
00:21 - What is Remote Desktop Protocol (RDP)?
01:10 - Running Nmap to assess the open ports
02:42 - Using Hydra to launch the Attack
03:57 - Testing/login with the discovered credentials using Remmina
04:50 - Setting up the Account Lockout Security Policy
07:05 - Testing Hydra after the Lockout Policy has been set
08:11 - Other attack mitigation techniques
08:46 - Wrap up/Summary
09:15 - Outro
NOTE: I am not sponsored by or affiliated to any of the products or services mentioned in this video, all opinions are my own based on personal experiences.
#Hydra #Cybersecurity #Education