Fuzzing Windows RDP Client for Vulnerabilities - A Research Journey

Explore the process of conducting vulnerability research on the Windows RDP client in this 24-minute Black Hat conference talk. Learn why Windows RDP was chosen as a target, how to gather public information to initiate research, and techniques for modifying open-source fuzzing tools. Discover the journey of overcoming challenges to uncover remote code execution vulnerabilities in Windows RDP clients, including the incorporation of race conditions into the research. Gain insights into the details of the discovered vulnerabilities and receive recommendations for Windows RDP vulnerability defense. Presented by security experts from DBAPPSecurity, this talk offers valuable knowledge for those interested in protocol security and vulnerability research.