🎬 Demo: Net-NTLM Hash Capture

With PyRDP we can capture Net-NTLMv2 hashes sent by clients. The certificate error is not even displayed before that attack takes place. This was reported to Microsoft but was considered "won't fix, works as designed". This means RDP cannot be used at all on untrusted networks.