> For the complete documentation index, see [llms.txt](https://calvin-lai.gitbook.io/calvin-lai-security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://calvin-lai.gitbook.io/calvin-lai-security/tools/04-windows-enum-and-exploit/rdp.md).

# RDP

xfreerdp /d:\<domain> /u:\<user> /v:\<target machine ip>   +clipboard&#x20;

rdesktop 10.11.0.22 -u hack -p pass123 -g 1024x768 -x 0x80&#x20;

net user hack pass123 /add && net localgroup administrators hack /add&#x20;

reg add "HKEY\_LOCAL\_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG\_DWORD /d 0 /f&#x20;