Important Notice: On February 29th, this community was put into read-only mode. All existing posts will remain but customers are unable to add new posts or comment on existing. Please feel to join our Community Discord for any questions and discussions.

BlueKeep RDP vulnerability scanner

Marcel Lipovsky

May 29, 2019 19:44

Hey guys, here is a very usefull tool from Robert David Graham which you can use to test your systems for the BlueKeep RDP vulnerability.

https://github.com/robertdavidgraham/rdpscan/blob/master/README.md

The Precompiled windows binary can be downloaded here:

https://github.com/robertdavidgraham/rdpscan/files/3226661/rdpscan-windows.zip

Comments

3 comments

Colby Bouma
May 30, 2019 14:49

Thank you for sharing this! I'm tentatively planning on writing a blog about using PowerShell to parse this data and put it into Custom Fields in Inventory.

0
Marcel Lipovsky
May 30, 2019 16:59

hey Colby, that would be awesome! Thanks buddy!

0
Colby Bouma
November 12, 2019 16:11

Oops, I forgot to update this post with a link to my blog: https://www.pdq.com/blog/import-bluekeep-scan-results-into-pdq-inventory-part-1/

Also, I just updated my script to use PowerShell 7's ForEach-Object -Parallel: https://github.com/Colby-PDQ/BlueKeep-Scanner-PS-Parser/commit/c55e3da9faa750d4083d15bd468fbd7ab7186c57

The blog is a bit mangled from our recent website revamp, so I recommend checking out the GitHub page instead: https://github.com/Colby-PDQ/BlueKeep-Scanner-PS-Parser

0