Unveiling the Hidden - Discovering RDP Vulnerabilities Using PDF Files

Explore innovative approaches to uncovering security vulnerabilities in the RDP protocol using Open-Source Intelligence (OSINT) techniques in this 17-minute conference talk from BSidesLV. Learn about the RDP protocol, its use cases, and the motivations behind adopting an unconventional research methodology. Discover how protocol specifications, open-source implementations, and publicly accessible resources can reveal hidden vulnerabilities. Gain insights into the comprehensive overview of discovered vulnerabilities, with an in-depth analysis of the most significant ones, including instances of remote code execution and security mechanism bypasses. Presented by Dor Dali, this talk challenges traditional reverse engineering methods and showcases the power of OSINT in identifying critical security shortcomings.